Fix to read-only functionality.
SA-CONTRIB-2014-108 - Webform Component Roles - Access Bypass
1 new feature, 3 bug fixes and 2 usability improvements. Here are the full details for release 6.x-1.10
4 new features, 9 bug fixes, 5 usability improvements and 1 correction for standards. Here are the full details for release 7.x-1.3
Some issues with field title and several other field attributes have been fixed.
SA-CONTRIB-2014-112 - Node Field - Cross Site Scripting (XSS).
See SA-CONTRIB-2015-073 - Trick Question - Cross Site Scripting (XSS)