Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
This is a security release, containing an important security fix. Users of the project are strongly encouraged to update to this version as soon as possible.
If you are using an older version, incorrectly escaped error messages might lead to your site being vulnerable to an XSS attack. Note, however, that this can only happen if you have some advanced search mechanism, like a view with exposed sorts or use the old (deprecated) Facets module.
As announced in the RC1 release notes, this release also removes the old Facets module, in the future only the Facet API integration is supported.
This release resolves security issues and is recommended for everyone. It also introduces a dependency on the Session API module, which should be installed before upgrading to BrowserID 7.x-1.3 (or later).