Install
Works with Drupal: 7.xUsing Composer to manage Drupal site dependencies
Downloads
Download tar.gz
246.21 KB
MD5: c405d4d20c5a4c7f2e7b7efe27715a7e
SHA-1: 06bc9aeb15aa2bf5080c33a45d347ff76e63e0be
SHA-256: 2eb536c578fc58de32969cdd706be14bd33458af54459228cdae6c62d68f0a78
Download zip
297.11 KB
MD5: e2f98f7148d55ee1e3d93ee21d4f1872
SHA-1: 20cd6a5cf185070f7c3c544522862c4d06871dff
SHA-256: a7d660ec87b6528fecdbad522202e7b12119982cf6197e2383f73f5be56c64b3
Security issues fixed
Release notes
This release resolves SA-CONTRIB-2019-096.
Changes since 7.x-4.20:
- By Ayesh, DanChadwick, Liam Morland, torotil: Validate that the 'sid' from $_POST belongs to the current user
- By Ayesh, Liam Morland: Remove arrays of 'sid' from $_POST in _webform_fetch_draft_sid()
- Refactor _webform_fetch_draft_sid()
Security update
