print 7.x-2.1

Fixes Printer, email and PDF versions - Highly critical - Remote Code Execution - SA-CONTRIB-2018-063

This 2.0 release marks the completion of the main objectives of the 7.x-2.x branch:

• Refactoring of all the link handling code to a separate sub-module: print_ui (if you don't enable this module, you will still be able to acess the printer-friendly pages directly at their URLs, but you won't get any module-generated links)
• Removal of the print array and of all hard-coded HTML code that was used in the old print.tpl.php to a print.tpl.php that is more inline with a normal Drupal template and to some themeable functions.
• Creation of a pluggable system for the print_pdf module, that can be used to easily add more PDF libraries.
• Refactoring of the dompdf, tcpdf and wkhtmltopdf to separate sub-modules (print_pdf_dompdf, print_pdf_tcpdf and print_pdf_wkhtmltopdf).
• Creation of the print_pdf_module which generates PDfs using the mPDF library.
• Creation of a new export format (EPUB) using the new print_epub module, which uses the PHPePub library to create EPUB files. Support for EPUB libraries is also pluggable, and PHPePub is handled in the new print_epub_phpepub sub-module.

Word of caution:

• The new template differs radically from the previous one. If you had custom print templates, you'll probably need to re-write them.
• The node visibility settings was removed, as this is beter handled via the already existing node-specific settings. If you relied on that one, prior to upgrading the module make a list of the affected nodes. At the moment there's no database upgrade function to keep those settings.
• The module has changed some of the internal APIs.. If you were calling them directly, take a look at the new API documentation. Specifically, the PDF generation from HTML no longer takes a 'print' array as the first argument, using instead a much smaller 'meta' information array as the second argument.
• Most of the custom text replacement was removed.. Use of the "String Overrides" module for most of those is recommended.
• The print_mail pre and post hooks were removed for now. If they're replaced, they'll probably provide different capabilities.

Changes since 7.x-2.0:

• Filter all scripts in HTML provided to PDF generation libraries.
• Sanitize arguments passed to the wkhtmltopdf executable.
• Minor fixes
• #2990466 by jcnventura: Improve mPDF 7.x discovery.
• Minor code quality improvements. Remove obsolete CHANGELOG.txt.
• #2705367 by alex.designworks, skari, jcnventura: wkhtmltopdf produces invalid PDFs that would not open in Chrome
• #2990479 by paulvandenburg, Tom Voesenek, jcnventura: Missing isset check in print_pdf_mpdf.pages.inc
• #2992512 by paulvandenburg, Tom Voesenek, jcnventura: Don't break the site when transitioning between mpdf tools
• #2990466 by paulvandenburg, Tom Voesenek: Add support for mpdf library v7.x
• #2875222 by Jorrit, gapple: Use token browser dialog for performance
• #2324829 by azovsky, hughworm, evgeny.chernyavskiy, calebtr, BrightBold, sdowney2002, sureshcj: "Close window after sending to printer" option breaks print on Chrome
• #2286845 by idebr, jcnventura, RenatoG: Implement form '#type' => 'actions' wrapper for themed forms
• #2835969 by Jorrit, abarpetia, crutch, RenatoG: array_key_exists() warning message
• #2896996 by Johnny vd Laar, RenatoG: _print_generate_path acts as if it renders a node and breaks other modules preprocess_page
• #565856 by bradjones1, ayalon, brockfanning, jcnventura: Can Panel pages be sent to PDF for rendering?
• #2427639 by abarpetia, zealfire, visabhishek: User list in send by email
• #1867656 by jcnventura: Clear cached wkhtmltopdf version during cc all
• #1867656 by jcnventura: Improve wkhtmltopdf PDF generation performance
• #2612372: Use DRUPAL_ROOT instead of dirname($_SERVER['SCRIPT_FILENAME'])
• #2612372 by Johnny vd Laar: Use DRUPAL_ROOT instead of dirname($_SERVER['SCRIPT_FILENAME'])
• #2349121 by mikeytown2, jcnventura: Avoid DOMNode::cloneNode() errors
• #2257075 by rudiedirkx, Placinta, SpadXIII, rv0: Headers already sent error when page not found/access denied
• #2276407 by freality: theme_hook_suggestions overwritten
• #2818589 by jcnventura: fix dompdf 0.7 auto config
• #1948414 by Елин Й., Mschudders, Johnny vd Laar, gaborpeter: Dompdf: Images not found because of itok
• #1808612 by gaele, jcnventura: Do to not show first PDF tool as selected for the default value
• #2818589 by AdamPS, jcnventura: Support dompdf version 0.7
• Coder fixes and update of library URLs
• #2268657 by markcarver, cgmonroe, guschilds: print_preprocess_print() incorrectly sets class on image for print_logo variable.