Fixes SA-CONTRIB-2014-085 - Ubercart - Information disclosure
Changes since 7.x-3.6:
Fixes SA-CONTRIB-2014-096 - OAuth2 Client - Cross Site Scripting (XSS)
Fixes SA-CONTRIB-2014-086 - Custom BreadCrumbs - Cross Site Scripting (XSS)
Changes since 7.x-2.0-alpha3:
Changes since 6.x-1.5:
Fixes SA-CONTRIB-2014-089 - Geofield Yandex Maps - XSS via field description
Fixes SA-CONTRIB-2014-084 - Avatar Uploader - Information Disclosure