Fix for ADVISORY DRUPAL-SA-CONTRIB-2012-122: http://drupal.org/node/1719402

Fix for SA-CONTRIB-2012-071

Make sure that user names and email addresses are sanitized before being displayed to the user. Security issue by hefox - see SA-CONTRIB-2012-119 - Excluded Users - Cross Site Scripting (XSS) for more details.

Fix CSRF vulnerability in switch links.

See security advisory: SA-CONTRIB-2012-116 - Subuser CSRF and Access Bypass

Fixes security issue: SA-CONTRIB-2012-117 - Location - Access Bypass.

Changes since 7.x-1.0-beta1 (2 commits):

Important location search change: For those using the location search sub-module, from now on users must have the "access content" permission and any relevant node access rights to see node based location search results and the "view user profiles" and "view all user locations" permissions to see user based location search results.

Fixes security issue: SA-CONTRIB-2012-117 - Location - Access Bypass.

Changes since 6.x-3.1 (49 commits):

Important location search change: For those using the location search sub-module, from now on users must have the "access content" permission and any relevant node access rights to see node based location search results and the "view user profiles" and "view all user locations" permissions to see user based location search results.