litejazz 7.x-2.3

Security update

Security fix LiteJazz Theme - XSS Vulnerability

commerce_custom_order_status 7.x-1.1

Security update

Security release of the module.

This release fixes critical security vulnerabilities. Sites are urged to upgrade immediately. No other fixes are included.

eu_cookie_compliance 8.x-1.1

Security update
Bug fixes
New features
Insecure

Version 1.1 fixes an issue where the "Disable Javascript" field (found only in the -dev branch and not in previous releases) allowed code injection.

It introduces several GDPR features:
- Adds an opt-out and opt-in experience, including blocking of Javascripts and whitelisting of cookies
- Adds Do-Not-Track header support
- Lets people to opt-out of tracking even if they opted in
- Advanced feature to prompt for agreement in each browser session
- Record consent when given (a basic storage mechanism is included, and plugins are supported)
- Adds Javascript events when the banners open/close

Several bugs have also been fixed.

Fix issue where 'Disable JavaScripts' setting allow code injection
Issue #2981019 by svenryen: Add validation to Privacy policy link to prevent the site from crashing.
Issue #2975382 by svenryen: Loading of JS fails after accepting on IE with protocol-relative domains
Issue #2977230 by svenryen: Can't submit eu cookie compliance settings form
Issue #2980445 by svenryen: Broken update path for 7003
Issue #2974996 by Lukas von Blarer, svenryen: Withdrawal tab covers elements behind it
Issue #2983927 by chipway: Apply new {project}:{module} format for dependencies in info.yml
Issue #2974224 by svenryen: Change default of "Consent method" to "opt_in"
Issue #2974223 by hass: Install file code review / Update 7006 may break module
Issue #2983881 by svenryen: "Show 'Cookie policy' and 'More info' buttons" option always falls back to checked, when using default consent
Issue #2975085 by basvredeling: JS hide animation doesn't respect popup position
Issue #2423649 by svenryen, jcmiller09, stevetweeddale: Add event for popup open/close
Issue #2975821 by yongt9412: cookie_session missing from schema
Issue #2974240 by hass: Code style / translatable string review
Issue #2974928 by vasrush: After clicking disagree there's no way to opt-in again
Issue #2974714 by visabhishek, svenryen: DNT 0 Is not working
Issue #2975287 by bucefal91: Misspelled namespace eu_cookie_complaince
Issue #2974074 by hitfactory: Error submitting configuration form when using Redis as cache backend
Issue #2978326 by yongt9412: Query on EuCookieComplianceConfigForm to cache table
Issue #2984437 by svenryen: On fresh installs, don't show the Policy tab
Issue #2954011 by svenryen, lexsoft: Offer a way for people to opt-out of tracking even if they opted in
Issue #2960487 by svenryen, edurenye, cgmonroe: Allow prompting for agreement each browser session
Issue #2962641 by svenryen, dragos-dumi: Check for disabled scripts in page html_head
Issue #2971461 by useernamee: Missing schema error
Issue #2960915 by svenryen: Path exclusion does not work on aliased paths
Issue #2968700 by svenryen, Alex Bukach: Geo IP match is handled wrong
Issue #2968956 by svenryen, Berdir: Ajax request to eu-cookie-compliance/store_consent/banner is missing the path prefix and should use POST
Issue #2964785 by osopolar: I can't submit eu cookie compliance settings form
Issue #2969157 by nkoporec, imshivani, riddhi.addweb: Use Short Array (New Coding Standard)
Issue #2969619 by svenryen: Module assumes full html is available if filtered is
Issue #2959617 by andrewbelcher: Remove silent dependency on node
Issue #2961464 by Grimreaper, svenryen: hook_requirements prevent installing new website with module provided values
Issue #2966857 by Baik Ho, svenryen: Drupal\Component\Plugin\Exception\PluginNotFoundException: The "" plugin does not exist
Issue #2955489 by svenryen: Record consent when given
Issue #2957794 by svenryen: Module needs a composer.json file
Issue #2953753 by svenryen: Add Do-Not-Track header support
Issue #2954007 by svenryen: Add an opt-out and opt-in experience

eu_cookie_compliance 7.x-1.24

Security update
Bug fixes
New features
Insecure

Version 1.24 fixes an issue where the cookie name (found in the Advanced settings section) wasn't properly escaped, allowing Javascript code injection. It also fixes an issue where the "Disable Javascript" field (found only in the -dev branch and not in previous releases) allowed code injection.

It introduces several GDPR features:
- Adds an opt-out and opt-in experience, including blocking of Javascripts and whitelisting of cookies
- Adds Do-Not-Track header support
- Lets people to opt-out of tracking even if they opted in
- Advanced feature to prompt for agreement in each browser session
- Record consent when given (a basic storage mechanism is included, and plugins are supported)
- Adds Javascript events when the banners open/close

Several bugs have also been fixed.

Fix issue where cookie name was not properly escaped
Fix issue where 'Disable JavaScripts' setting allow code injection
Issue #2975382 by svenryen: Loading of JS fails after accepting on IE with protocol-relative domains
Issue #2982410 by svenryen: Undefined index: show_disagree_button in eu_cookie_compliance_requirements()
Issue #2976659 by Berdir, AdamGerthel: Function name must be a string
Issue #2974996 by svenryen, Lukas von Blarer: Withdrawal tab covers elements behind it
Issue #2974224 by hass: Change default of "Consent method" to "opt_in"
Issue #2974223 by hass, svenryen: Install file code review / Update 7006 may break module
Issue #2983881 by szeidler: "Show 'Cookie policy' and 'More info' buttons" option always falls back to checked, when using default consent
Issue #2975085 by basvredeling: JS hide animation doesn't respect popup position
Issue #2423649 by svenryen, jcmiller09, stevetweeddale: Add event for popup open/close
Issue #2974240 by hass: Code style / translatable string review
Issue #2974714 by visabhishek, svenryen: DNT 0 Is not working
Issue #2974928 by vasrush, svenryen: After clicking disagree there's no way to opt-in again
Issue #2984437 by svenryen: On fresh installs, don't show the Policy tab
Remove extra line in JS.
Renaming update hook
Fix admin config field label
Revert "Issue #2933614 by svenryen, MaskOta, GaëlG, jhuhta, phjou: How to block cookies until the user accepts, for example Google Analytics cookies?"
Issue #2954011 by lexsoft, svenryen: Offer a way for people to opt-out of tracking even if they opted in
Issue #2933614 by svenryen, MaskOta, GaëlG, jhuhta, phjou: How to block cookies until the user accepts, for example Google Analytics cookies?
Issue #2960487 by svenryen, edurenye, cgmonroe: Allow prompting for agreement each browser session
Issue #2965976 by svenryen: Notice : Undefined index
Issue #2968700 by svenryen, Alex Bukach: Geo IP match is handled wrong
Issue #2718281 by heyyo, svenryen: jQuery is not defined
Issue #2968956 by svenryen, Berdir: Ajax request to eu-cookie-compliance/store_consent/banner is missing the path prefix and should use POST
Issue #2969619 by Adam_Moulsdale: Module assumes full html is available if filtered is
Issue #2959617 by svenryen: Remove silent dependency on node
Issue #2968610 by svenryen: After installing, two notices are thrown
Issue #2968456 by davidraijmakers: 7.x GDPR issues
Issue #2955489 by svenryen: Record consent when given
Issue #2718281 by svenryen, heyyo: jQuery is not defined
Issue #2953753 by svenryen: Add Do-Not-Track header support
Issue #2953753 by svenryen: Add Do-Not-Track header support
Issue #2954007 by svenryen: Add an opt-out and opt-in experience

Pages

Subscribe with RSS Subscribe to RSS - Security update