Hi! We have found an issue and tested with 2 different versions of Metatags (and even tokens to see if upgrading solves the problem). The issue is that browser tab shows different username than the logged in person when checking profile information.

Steps:
- install metatags (7.x-1.18 or 7.x-1.20) module
- install token module (7.x-1.5 or 7.x-1.7) module
- create a new user (or use existing ones) - you will need 2 users with different names
- login with user1 (on firefox) and visit the following page and check if the browser tab shows the current user's name: /civicrm/profile/view?gid=1&reset=1
--> current user's name is shown
- then login with user2 on another browser and visit the same page and check if the current user's name shows up on the browser tab
--> no user1's name will show up
--> if you clear caches and then try to do the same steps again, it will give the same result
--> happens with new and old profiles as well

When I disabled the Metatag module, and followed the same steps above, the browser tabs were fine, and always got updated with the current user's name.

Tested on Drupal 7.52, Civicrm 4.6.24

CommentFileSizeAuthor
Screen Shot 2017-01-30 at 13.01.29.png329.26 KBtorokrita
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

torokrita created an issue. See original summary.

DamienMcKenna’s picture

DamienMcKenna’s picture

Issue tags: +Security
klausi’s picture

Version: 7.x-1.18 » 7.x-1.21
Status: Active » Fixed

this went out as security release.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.