Install
Works with Drupal: ^9.3 || ^10 || ^11Using Composer to manage Drupal site dependencies
Alternative installation files
Download tar.gz
23.38 KB
MD5: a92faf4fbf36281f9f48b7dd2acfee9e
SHA-1: 1eee58b9b1f176d8224939838da833f45deed34a
SHA-256: 25094bcc9205f124c2ec25d49709689c1422b7a20f866ffc3c94eeb18ac8a347
Download zip
35.03 KB
MD5: 4961adeeb82f9ed9d4a0323e5b63b034
SHA-1: 600f7ecc06363b2b7aaf4c1f3e81dca57fd8e2cf
SHA-256: e827339598b6719aa7d3e2d1d0d3c3c2a8698895145931a8f7aa07d314325389
Security issues fixed
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the following security announcements and release notes:
Release notes
Security release. See the security advisory: https://www.drupal.org/node/3628958
- Escape CSV cell and header values before DataTables renders them.
- Declare the core/jquery and core/once library dependencies and replace the jQuery $.trim() calls removed in jQuery 4, so the table renders on a stock theme.
- Pass the escape argument to fgetcsv() explicitly for PHP 8.4.
- Set the field type category to "file_upload", as required by the field type categories introduced in Drupal 10.2. The "Add field" group for the CSV field changes from "Reference" to "File upload"; on Drupal 9 and 10.0/10.1 the group label shows the raw key.
- Add a FunctionalJavascript test and GitLab CI.
Security update
