authcache 7.x-2.0-beta7

This is the seventh beta release of Authcache 2.0. This release brings one very important security fix and does not introduce any new features.

Sites using Authcache Block, Authcache Views and Authcache Field are vulnerable to an XSS attack through the administrative interface of the Authcache Personalization API module. This vulnerability is mitigated by the fact that an attacker must have a role with the permission Administer blocks, Administer views or any permission which allows to add or modify fields on any entity type (e.g. Administer content types).

See #2541886: XSS vulnerability in administrative interface for more information. Special thanks to @mr.baileys for reporting this issue and working on a fix.

In addition this release also contains fix for a bug introduced in 7.x-2.0-beta6 #2540542: Fragments missing since 7.x-2.x-beta6..

Use gitweb to review the full list of changes between beta6 and beta7.