Downloads

Download nodereference_url-6.x-1.10.tar.gztar.gz 12.42 KB
MD5: 32e5bcee4143da6823ab3a778720d0a5
SHA-1: 535d84fee4c8b4e1aa181a6045f37f2e6b42b278
SHA-256: 92d4c088acd6ac7353115519b97e870ccc4629a23b75574a272d2b33747f5384
Download nodereference_url-6.x-1.10.zipzip 13.71 KB
MD5: 7df08cf6865bb0d964ccc758846f3ddd
SHA-1: 9bb5e601706b24e2b5b733fa766761aab1fd3c59
SHA-256: 14bdcab43e0459dc7da4af2d6a90e66785398a346a6a6ba9bb1daf48d7dc5376

Release notes

The 1.10 release of Node Reference URL Widget corrects an XSS security hole. All previous versions of Node Reference URL Widget would not sanitize the node title when displaying the referenced node. Upgrading is recommended for all users.

See SA-CONTRIB-2011-018 - Node Reference URL Widget - Cross Site Scripting

Created by: quicksketch
Created on: 27 Apr 2011 at 18:48 UTC
Last updated: 27 Apr 2011 at 19:15 UTC
Git tag 6.x-1.10
Security update

Other releases