Install
Works with Drupal: 7.xUsing Composer to manage Drupal site dependencies
Downloads
Download tar.gz
178.52 KB
MD5: 8aed2f45bc2c66d21b197fe0e25ee268
SHA-1: 36ea53944557cf51b815dc9e39fa3d414b7a6a36
SHA-256: 952a1903b1aa6ede16d39a8e352c1bb9c7d61f3ab719bbd42632278b14934bec
Download zip
219.37 KB
MD5: 61b6752b1aa339108f8c520eedc8a9c8
SHA-1: 3fe838caf64edd00ebfbb15bee256f169417d353
SHA-256: 54f3c9bc480fad06cdb479e5693d5ebffa6c03281a7685b4e681b972c4f020b8
Release notes
SA-CONTRIB-2014-018 - Webform - Cross Site Scripting (XSS)
This release of Webform 4.x fixes a large number of bugs and addresses an XSS security vulnerability. Beta2 introduces a new feature to preview submissions before submitting them in multipage forms. Upgrading is recommended for all users of Webform 4.x.
Bug fixes since 7.x-4.0-beta1:
- #2158261 by dagomar: Show all pages in Webform block by default.
- #2160813 by Liam Morland: Allow cloning e-mail settings.
- #2177403 by mikran: hook_node_update() implementation doesn't reset nid for new components.
- #2171485 by Balu Ertl: Update function missing missing word for clarity.
- #2068305 by issa.haddadin: Prev page button label/ Next page button label should be translatable.
- #2179405 by torrance123: Convert subject, from_name, from_email, email fields to text to allow room for token storage.
- #1968434: Undefined property: stdClass:: in webform_block_view() (line 1759 of webform.module)..
- #2126559 by SpadXIII: Incorrect button labels with "preview page" on single page form.
- #435232 by jaroslaw.kaminski: Followup to fix token replacement in preview page.
- #2119193 by grahamC: PDOException: SQLSTATE[HY000]: General error: 1364 Field 'nid' doesn't have a default value.
- #2191467 by Liam Morland: Progress bar should not appear on confirmation page of 1 page forms.
- #1800212: Notice: Undefined index: info in webform_tokens() (line 137 of /var/www/sites/all/modules/webform/webform.tokens.inc).
- #2038139 by ParisLiakos, fenstrat: Further roll back of accidental non-related commit.
- Removing outdated CHANGELOG that hadn't been updated in years.
- #2137125: Updating README.txt for upgrading to 4.x.
- #2038139: Rolling back accidental non-related commit from Issue 2064851.
- #2038139 by marcoscano: Uninitialized string offset: 0 in webform_email_edit_form().
- #2079665 by colemanw: Patch fixes undefined index warning on date fields (PHP 5.4).
- #2106383 by webcurl: Deleting conditionals in IE8 causes "Invalid argument" error.
- #2103883: #weight is defined twice webform.pages.inc.
New features