See also SA-CONTRIB-2013-060
Changes since 6.x-1.0-beta2:
Fixes: possible SQL injection in Biblio via order-by
See SA-CONTRIB-2013-059 - Hostmaster (Aegir) - Access Bypass for details.
Changes since 6.x-1.9:
Changes since 7.x-1.3:
Filter some xss - see SA-CONTRIB-2013-055 - Hatch - Cross Site Scripting.