Download filefield_sources-7.x-1.11.tar.gztar.gz 29.28 KB
MD5: 5718b0dfc31103ca20604f01e3ca30fa
SHA-1: 0202c26373b33961cc288053ce4deb19b3ed7c13
SHA-256: 78098998fa5a090108308023db14a0d27c690259131d4621dcf97cdf9e603826
Download filefield_sources-7.x-1.11.zipzip 38.98 KB
MD5: e48ad8ff620acf3d0dfc48188f9e6b61
SHA-1: 74c70309ea4ac1f57472b6b747556498d9858ed9
SHA-256: 3d2009abcf2764b387203f9ea653bcaa2b7deed3ce93fbaece6d1eae8a0db8e9
Install with Composer: $ composer require 'drupal/filefield_sources:^1.11'
Using Composer to manage Drupal site dependencies

Release info

Created by: quicksketch
Created on: 7 Feb 2018 at 02:15 UTC
Last updated: 7 Feb 2018 at 18:35 UTC
Core compatibility: 7.x
Release type: Security update, Bug fixes

Release notes

This release of FileField Sources fixes several long-standing bugs that have been fixed by the community as well as a security fix that now properly hides the file names when using the autocomplete source. The security fix only applies to users that both used the autocomplete source and used private files on the same field. See the security announcement at https://www.drupal.org/sa-contrib-2018-007 for more information.

Changes since 7.x-1.10

#2088985: Fatal error on line 139 when cURL not installed.
#2461929 by Deciphered: Support sources with _ (underscore) in machine name.
#2176133 by Alan D., GiorgosK, quicksketch: Allow public files to always be reused and/or skip access check if permissions allow.
#2657002 by jrglasgow: Access Denied when trying to retrieve file from Akamai
#2703405: Remove the by-reference operator in cURL callback.
#2638914: Files will not be removed from server directory with attach_mode 'move'.
#2888308 by David_Rothstein: Update custom version of file_save_upload() to match Drupal 7.56
#2564593 by Deciphered: Check temporary file isn't destination file before deleting
#2033269 by Dave Reid: Attach help text uses realpath() which does not return output for Drupal file directories
#967992: Making header checks case-insensitive.

Dependencies

The selected release is the release that will be used for automated testing. Optional projects are only used for testing.

Required

No required projects

Optional

No optional projects