Releases for Wishlist Module

This branch starts from a new code base. This allows Drupal 8 core functionality to be used wherever possible, instead of all the custom code that was necessary in previous versions.

The branch is not close to being ready. However, it will install without error and create a Wishlist content type, a WishlistPurchased config entity and a settings form.

Addresses XSS and CSRF vulnerabilities. For more information see SA-CONTRIB-2015-014 - Wishlist - Multiple vulnerabilities

Addresses an XSS vulnerability. For more information see SA-CONTRIB-2012-042 - Wishlist Cross Site Scripting (XSS).

First pass completion of D7 port. Light testing has only been applied - please submit issues and patches if problems are found.

The emphasis of testing has been with new installations, not upgrade installations. The data structure between the 6.x-2.4 version of the module and this version was not changed and I expect migration to work well because of that.

Upgrade to 6.x-2.4 and then upgrade to 7.x-2.x-dev. Perform the upgrade on a test site. Verify your data. Validate the wishlists display correctly.

Formal release of the 6.x compatible wishlist module with a few minor bug fixes. No major new features, pretty much the same as the 5.x v2 of the wishlist module.

Version 2.0 of the wishlist module contains several new visibility protection features, including configuration options that can make it very difficult for your users to see the purchased status of their wishlist items.

Display configuration options have been added that allow you to control which columns appear in the wishlist table view and to control the number of rows that the table will have. A theme function has also been added to allow developers to change the display name shown for users in the wishlist module. You are also able to hide the currency field if your site does not require multiple currency support for wishlist nodes.

Several bugs have been fixed, including some important CSS layout errors and an access control error that allowed anonymous users to view the list even when they were not authorized to do so.

A new feature has been added to automatically remove items from the wishlist a certain number of days after the item has been fully purchased. This feature requires a database change, so be sure to run update.php (note: postgres support is incomplete as I only run with and test mysql).

There are now 'new' indicators on wishlist items in the same way forums and comments are flagged as new throughout the Drupal platform.