Drupal
/
drupal
mirror of https://git.drupalcode.org/project/drupal.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Issue #2459339 by hgoto, dagmar, klausi, kporras07, David_Rothstein, Fabianx: Log messages should be XSS filtered on display

merge-requests/26/head
stefan.r 2016-09-29 17:47:05 +01:00
parent 27e42bdd67
commit 9d50e137da
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGELOG.txt
View File

@ -6,6 +6,7 @@ Drupal 7.51, xxxx-xx-xx (development version)
- Exceptions thrown in dblog_watchdog() are now caught and ignored. - Exceptions thrown in dblog_watchdog() are now caught and ignored.
- Clarified the warning that appears when modules are missing or have moved. - Clarified the warning that appears when modules are missing or have moved.
- If the page title is "0", it is now displayed. - If the page title is "0", it is now displayed.
- Log messages are now XSS filtered on display.
- Draggable tables do now work on touch screen devices. - Draggable tables do now work on touch screen devices.
- Numerous small performance improvements. - Numerous small performance improvements.
- Numerous small bugfixes. - Numerous small bugfixes.

4
misc/tabledrag.js
View File

@ -277,8 +277,8 @@ Drupal.tableDrag.prototype.makeDraggable = function (item) {
// Add the mousedown action for the handle. // Add the mousedown action for the handle.
handle.bind('mousedown touchstart pointerdown', function (event) { handle.bind('mousedown touchstart pointerdown', function (event) {
if(event.originalEvent.type == "touchstart"){ if (event.originalEvent.type == "touchstart") {
event=event.originalEvent.touches[0]; event = event.originalEvent.touches[0];
} }
// Create a new dragObject recording the event information. // Create a new dragObject recording the event information.
self.dragObject = {}; self.dragObject = {};