Security update

Highlights in this release:

- Several performance related optimizations have been added.
- Added HTTP range support for high performance link checks with GET method.
- New link checker mode: internal only

Other changes and bugfixes:

* Fix for access bypass vulnerability.
* #1429284: Don't follow redirects
* Removed block 'title' for consitency reasons. It's only a title in administration and should not contain URLs
* Show a recommendation next to blacklisted filter names.
* #1149596: Links with spaces are not extracted
* Backported some documentation fixes
* Batch redirect URL added for blocks
* #860700: Disable all non-http(s) links for link checking until we have curl implemented
* #1054118: After batch scan the target url is not pointing to the node view
* #1075390: Added HTTP range support (Performance)
* Links disabled for checking (blacklist, never checked) will be counted as as unchecked and the number of unchecked links will therefore never become zero.
* #1321378: Improve performance of queries
* #953958: User able to see other user broken links
* truncate is ***much*** more faster than delete.
* #725398: variable_get() may not be available in the install.php run
* First decode, than filter as URLs could theoretically consist of encoded blanks only.

For up-to-date release notes and documentation, visit https://network.acquia.com/downloads/drupal-commons/6.x-2.5-release-notes.

Commons 2.5 contains product enhancements and security updates. Users are strongly encouraged to apply this security update.

Version announcements

Drupal Core updated

Bug fixes:
http://drupal.org/node/1436750
http://drupal.org/node/1436702

Makes uses of Show Password jQuery plugin instead of the js written by me. So lesser possibility of bugs as the older js that was in use wasw written in a hurry.

This release pretty much fixes all the existing known issues.

Addresses SA-CONTRIB-2012-017.
Issue #1383918 by Georgii: Only set false token with logged in user.
Issue #11394130 by danielb: Added a #title_display setting.
Issue #1407880 by danielb: Compatibility with certain block views.
Issue #1414108 by kervi: Syntax error in element ui.
Issue #1414108 by kervi, danielb: Title display not saved.

SA-CONTRIB-2012-018 - Revisioning - Cross Site Scripting

Important!! It was discovered post-release that this version of Drupal only includes bug fixes from Drupal 7.9, not Drupal 7.10! Users are encouraged to use Drupal 7.12 instead. Discussion is happening at #1430404: Drupal 7.11 is missing all the bug fixes from Drupal 7.10