See Linear Case - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-084
Changes since 6.x-1.2:
See Petition - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-081