Bug fixes

Contributors (28)

Security fixes:

1. The footnotes text format has more limited allowed html, but whatever html was provided by it was copied into the data-* attribute of the footnote in the parent text format. Users without 'Limit allowed html' enabled should either enable that or update to beta7 if untrusted users are adding footnotes or pasting from untrusted sources.
2. Raw is avoided in default twig templates, the footnote text is converted to a markup object so it renders properly without raw

General changes:

Add condition for field additionnal getted in block

No longer log missing URLs.

• Additional Field block select field from agenda
• Add variables in comment tpl event single : Event data + List of field additional keys + Agenda settings
• Add public key check in openagenda form config

Fixes a bug that could cause an error on installation due to a missing permission (#3535020: drupal_cms_starter recipe tries to grant "access toolbar" permission, which doesn't exist).