Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.This module was doing some extra (unnecessary) filtering which caused html characters to be double escaped - e.g. & turned into &.
To reproduce this and make sure it's still "safe" try entering text like <script>alert('nodes link text');</script>& into the "Nodes: Link text:" or "Title text:".
There was also a problem with the menu type of the new menu entry and an unnecessary variable assignment in an if statement, which I cleaned up.
| Comment | File | Size | Author |
|---|---|---|---|
| pl_small_cleanups_no_double_filter.patch | 2.15 KB | greggles |
Comments
Comment #1
todd nienkerk commentedCommitted and released as 6.x-1.5.
Comment #2
todd nienkerk commented