Security update

2.0.15

• Another XSS fix and security advisory.

2.0.14

• Security Advisory fix for XSS
• Sanitize user suppled SVG content before saving to the public file system
• Added test coverage

2.0.13

• entity query improvement with new test
• fixed schema
• add option for export file name

2.0.12

• Issue #3540021: Views relationships dont work on reference field
• Update libraries
• Validate numeric number money

3.0.1

• fix for Stored XSS (CWE-79) in Data Field:

Security release discussed in forthcoming advisory.

• Honour only the redirect URL that was handed to Mollie (by @hansrossel)
• Act on a notification only for the order the transaction belongs to (by @hansrossel)
• Act on a payment only in the context the webhook was called for (by @hansrossel)

This is a security release. All sites using Page Manager with the Page Manager UI submodule enabled should update.

After updating, run database updates (drush updb or /update.php) so the fix takes effect.

This release also adds Drupal 12 compatibility and fixes a bug where a stale copy of a page in the edit form could undo an enable or disable made from the Pages list.

Security release discussed in forthcoming advisory.