Install
Works with Drupal: ^11.4 || ^12Using Composer to manage Drupal site dependencies
Alternative installation files
Security issues fixed
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the following security announcements and release notes:
Release notes
- Fixed stored XSS vulnerabilities involving menu icon titles and submenu labels.
- Improved HTML filtering for translated slideshow text and author/date labels, and escaped content-type labels in developer links.
- Preserved translation support and safe HTML in slide descriptions, including links, line breaks and emphasis.
- Fixed multilingual slide links by resolving URL aliases before generating links in the current language.
- Improved caching for translated text and multilingual slide links.
- Hardened custom CSS file validation.
- Fixed #3630998: TypeError: in_array() argument #2 must be of type array, string given in preprocessAggregatorContainer().
