Tanggal 5 Juni 2009, CCK 6.x-2.3 diterbitkan. Ada 3 hal penting pada versi ini, yaitu:
- Perbaikan sejumlah bug,
- Support tahap awal untuk Panels 3
- Dibuangnya fitur Multigroup (fitur ini tetap dilanjutjan di versi percobaan)
Selengkapnya perubahan pada CCK 6.x-2.3 adalah sebagai berikut:
FITUR:
-
#414298 by Michelle, merlinofchaos - Add Panels 3 integration for fields and fieldgroups.
- #419678 Views integration: expose CCK fields to 'Node revision' Views.
- #399778 by Benjamin Melençon - Nodereference / Userreference: Add 'size' setting to autocomplete widgets.
- #479044 by merlinofchaos - Add Panels 3 relatioships for nodereference and userreference fields.
PERBAIKAN BUG:
- #407446 by quicksketch: prevent double serialization during per-field to per-type migration.
Followup: update function to fix potentially existing corrupted data.
- #407344 fix html appearing in selects in Views filters.
- #409320 by bengtan: Nodereference / Userreference - fix 'this post
cannot be referenced' for views-defined referenceable nodes/users, when
the view definition has a 'limit'.
- #409398 by markus_petrux - fix handling of fieldgroup_types() (prep work for combo / multigroups)
- #356908 Number : Correclty filter 'prefix' and 'suffix' properties.
- #412058 by fago - Rules integration: Fixed condition 'field has value' when operating on viewed nodes.
- #413792 Views integration: fix fields using 'multiple formatters' and
not 'group multiple fields'. Thanks Crell and quicksketch for the
detective work.
- #421126 Views integration: Use value aliases in argument title replacements for text / number fields.
- #397358 by Darren Oh, yched, markus_petrux - Views integration: Use
node title / user name in argument title replacements for nodereference
and userreference argument fields.
- #428400 Views integration: Fix fatal error with Views 2.4
(views_handler_filter_float has moved). Preserved compatibility with
Views 2.3.
- #447562 by markus_petrux: fix non-XHTML markup on 'Manage fields' screen.
- #369364 Views integration: fix non-XHTML markup when displaying fields with the 'group multiple values' option.
- #441412 by jcnventura - Add 'Print' display context on 'Display fields' pages when book.module is enabled.
- #458952 Let different modules defined the same build_mode information.
- #383038 by markDrupal - Userreference: fix broken 'reverse links' with fields in per-type table.
- #479074 by rickward: prevent minor XSS vulnerability when displaying user-submitted 'Body field' labels.
- #479994 by quicksketch: fix "add more' button with devel.module's query logging.
Di consulenza ID:
Di consulenza ID: DRUPAL-SA-CONTRIB-2009-046 * Project: Data (modulo di terze parti) * Versione: 6.x * Data: 2009-luglio-29 * rischio di sicurezza: moderatamente critiche * Sfruttabile da: Remote * Vulnerability: Cross Site Scripting DESCRIZIONEIl modulo Data fornisce un campo data CCK che possono essere aggiunti a qualsiasi tipo di contenuto. ccvp certification Data Tools modulo che viene fornito in bundle con il modulo finora non adeguatamente sfuggire l'input dell'utente, ccnp certification quando vengono visualizzate le etichette per i campi su un tipo di contenuto. Un utente malintenzionato con il 'permesso di utilizzare strumenti di data' del sub-Data Tools modulo, o il 'permesso di amministrare i tipi di contenuto' ccna certification potrebbe tentare di cross site scripting [1] (XSS), attacco quando si crea un nuovo tipo di contenuto, che porta alla ottenere pieno accesso utente amministrativo.