Downloads
Download tar.gz
7.52 KB
MD5: c841754dd47ba57fc66a2e78c9415194
SHA-1: e9837fc86aa6e96be233e800977d74ef78a63331
SHA-256: f873c6326e52dbe020ecca17b04310bddc0a06e0b39b32f745a464c810fe6be6
Download zip
8.36 KB
MD5: fd13bd2bcc4e4dbfcc9f882a369270d8
SHA-1: 5479b7b3a4c692d563aff2e8e0fe584deebb29ba
SHA-256: a01495850600af6a9d8fcd69130de536ad240d6f88dd8e3ba9abda50c6fdf89f
Release notes
This release includes a fix for a cross-site scripting (XSS) vulnerability in which JavaScript could be inserted in the title of the Recent Comments block via a custom block title interface. This custom title interface has been removed, as Drupal 5.x and later allow overriding the a block's title from its configuration screen.