7.x

This release contains a security hardening of the Redsys response handling and the changes made since 7.x-1.4. All 7.x-1.x users are encouraged to update.

(1) Default htmLawed config. denies custom elements. This does not affect existing htmLawed filter configuration for a Text Format, and is the value that a new filter configuration's form-field gets pre-filled with. To deny custom elements, htmLawed config. value should have 'any_custom_element'=>0

(2) Changes to documentation.

Fix access bypass from case insensitive Access Key matching and add rate limiting

D7 version

fix: Link style affected by parent theme

fix: Missing styles for code editor switch