Downloads

Download tar.gz 7.52 KB
MD5: c841754dd47ba57fc66a2e78c9415194
SHA-1: e9837fc86aa6e96be233e800977d74ef78a63331
SHA-256: f873c6326e52dbe020ecca17b04310bddc0a06e0b39b32f745a464c810fe6be6
Download zip 8.36 KB
MD5: fd13bd2bcc4e4dbfcc9f882a369270d8
SHA-1: 5479b7b3a4c692d563aff2e8e0fe584deebb29ba
SHA-256: a01495850600af6a9d8fcd69130de536ad240d6f88dd8e3ba9abda50c6fdf89f

Release notes

This release includes a fix for a cross-site scripting (XSS) vulnerability in which JavaScript could be inserted in the title of the Recent Comments block via a custom block title interface. This custom title interface has been removed, as Drupal 5.x and later allow overriding the a block's title from its configuration screen.

Created by: todd nienkerk
Created on: 18 Jan 2010 at 22:22 UTC
Last updated: 20 Jan 2010 at 18:53 UTC
Security update
Unsupported

Other releases