Security update

See SA-CONTRIB-2013-052

Changes since 7.x-2.3:

See SA-CONTRIB-2013-052

Changes since 7.x-1.7:

• Sanitize label.

Improved module name so that it was clear that it's a maestro related module
Add index on instance_name to install function
Fix for update 7003 - used wrong index type
Fix for breadcrumb issue #1876390
fixed a couple description or title typos
Fix for missing ajax return status that was triggering an AJAX failure with the latest jQuery
Added install update for new instance field in the project_content table
Issue #1817704 by sukr_s - If condition not working with < and > operators
Issue #1994182 by sukr_s - Increased notification message size
Issue #1909534 by sukr_s - OG notification support
Added support for Organic Groups v2
Adding support for multiple content instances of same entity
Improved help messages for review_contentType interactive function and added a new viewContentType interactive function
Changed name of test interactive task to maestro_placeholder and moved test batch function to the the maestro_common module
Tweaked help text for reviewContentType task
Code cleanup on ctools modal view content feature and disabled contextual_links in modal view of the node
Cleaned up setProcessVariable edit task display and added 'description' attribute for set methods

Security update plus major refactoring of rest server.

See also SA-CONTRIB-2013-051.

You can always find the most up-to-date release notes at http://docs.acquia.com/commons.

2.13 (Drupal 6.28 core) - 6/03/2013

Drupal Commons 2.13 contains contributed module updates. Users are strongly encouraged to apply this update.

The following list describes what's new in this version:

This release of Webform fixes a security vulnerability where unsanitized labels could be displayed to users creating or configuring Webform content. This problem only exists in the Drupal 6 version of Webform. For more information see SA-CONTRIB-2013-050 - Webform - Cross Site Scripting (XSS).

In addition to the security fix, this maintenance release includes several bug fixes as listed below. Upgrading is recommended for all users of Webform 3.x.

Bug fixes since 6.x-3.18:

• #1844278 by Liam Morland: Spelling mistakes.
• #1462986: Undefined index: #webform_component in select.inc.
• #1720922: Notice: Undefined index: aslist in webform_select_options_ajax().
• #1762262: Option for "Parent fieldset" should not hinge on fieldsets alone.
• #1724480 by Alan D., fenstrat: Added API docs for _webform_theme_component() to show that path parameter is required.
• #1730714: Allow private option to be editable in Form Builder.
• #1512902 by rocketeerbkw and tim.plunkett: Document hook_webform_results_access().