Security update

This release fixes XSS security vulnerabilities found by the security team.

SA-CONTRIB-2014-088 - Mollom - Cross-site scripting (XSS)

SA-CONTRIB-2014-088 - Mollom - Cross-site scripting (XSS)

If you are upgrading from 1.6 or lower please read the 1.7 release notes

• Fixed #2331067: Unsafe permissions

This release fixes SA-CONTRIB-2014-024.

Since the behaviour of the module changed with this fix, and to indicate a new, secure branch, we've bumped the major version to 2.x.

Drupal Commerce 1.10 is primarily a bug fix release that addresses the vulnerability described in SA-CONTRIB-2014-087 - Drupal Commerce - Information disclosure and a variety of smaller bugs. The information disclosure fix includes an update hook that cleans usernames created by a default checkout completion rule to remove the host name from e-mail addresses used as usernames.