6.x

Changes since 6.x-1.1:

• #2007172 by greggles: Typo prevented googleanalytics prevention from working.

bb239dd Issue #2002240 by wamilton: Make the number of batch items configuraable
f509269 Do not run tests located within \vendor\ directories
de35480 Fixed incorrect environment status background color in test status pages
0d3c9ce Issue #1909128 by jthorson: Added verbosity to test setup clear checkout step
8c02af9 Issue #1905842 by jthorson: Colorize active testing status in environment table
7066fdc Updated pifr_client_cron_test_processess_get() to respect new core subdirectory
e440b6a Rollback of previous commit.

This release of Webform fixes a security vulnerability where unsanitized labels could be displayed to users creating or configuring Webform content. This problem only exists in the Drupal 6 version of Webform. For more information see SA-CONTRIB-2013-050 - Webform - Cross Site Scripting (XSS).

In addition to the security fix, this maintenance release includes several bug fixes as listed below. Upgrading is recommended for all users of Webform 3.x.

Bug fixes since 6.x-3.18:

• #1844278 by Liam Morland: Spelling mistakes.
• #1462986: Undefined index: #webform_component in select.inc.
• #1720922: Notice: Undefined index: aslist in webform_select_options_ajax().
• #1762262: Option for "Parent fieldset" should not hinge on fieldsets alone.
• #1724480 by Alan D., fenstrat: Added API docs for _webform_theme_component() to show that path parameter is required.
• #1730714: Allow private option to be editable in Form Builder.
• #1512902 by rocketeerbkw and tim.plunkett: Document hook_webform_results_access().

Changes since 6.x-1.0:

• #2006500 by greggles | killes: remove bueditor permission
• Standardizing on README.txt
• Stripping CVS keywords

When an author has created content containing a user reference field (with author update/delete grants enabled) and the author's user account is later deleted, content created by them can be edited by anonymous users.

This release fixes this issue.

SA-CONTRIB-2013-049 - Node access user reference - Access Bypass

Fixed undefined index in panels_subsites_token_values() on PHP 5.3.