Once I finally get around to pulling OG Forum D7 back into the fold here, I want to take a look through https://www.drupal.org/sandbox/thepanz/1110446 to see what was done (if anything) to address the SA.

Comments

nhoeller’s picture

I was involved with the testing of the patches to resolve the OG Forum security issues. Although the patches appeared to address the concerns, they introduced functionality issues. My limited PHP expertise, the complexity of the module and lack of time prevented me from helping to address these outstanding issues.

vegantriathlete’s picture

@nhoeller Thanks for chiming in. Just to let you know, I'm a bit tied up at the moment and will need to free up some time somewhere in the indeterminate future to get back to this.