Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
Resolves issue with Spaces and Spaces OG modules (part of the spaces package) which in some cases did not apply the expected spaces access permission to pages that are non-objects (e.g. /node)
For the majority of user, nothing further is required. The update prevents users without permission to use an input filter that allows javascript from using it in the custom user message field.
If you have used javascript in the custom user message, you must change the input filter on the message to a format that supports javascript.