Security update

This is a maintenance release for Simplenews 6.x-2.x that includes a number of bugfixes including a fix for a security issue, see SA-CONTRIB-2013-080 -Simple News - Cross Site Scripting (XSS) for details.

Changes since 6.x-2.0-alpha5:

• by Berdir: Fixed subscriber mail is not run through check_plain() on overview.
• Fixed subscriptions' 'Activated' Views filter

This is a maintenance release for Simplenews 6.x-1.x that includes a number of bugfixes including a fix for a security issue, see SA-CONTRIB-2013-080 -Simple News - Cross Site Scripting (XSS) for details.

Changes since 6.x-1.4:

• by Berdir: Fixed subscriber mail is not run through check_plain() on overview.
• #1387648 by anrikun: Fixed Sender name is MIME-encoded twice.

* Vulnerability one - remote code execution possibility through json_decode implementation in the block reaction. This update removes the implementation in the block reaction and you will need to ensure your version of PHP included a json_decode function before applying.

This release of Context addresses two security vulnerabilities and a bug introduced in rc1.

Fixed block access.

Fixed block access.