User: goba Branch: DRUPAL-6--1 Date: Wed, 19 Aug 2009 19:08:29 +0000 Modified files: /modules/l10n_server/l10n_community l10n_community.js l10n_community.module Log message: Fix for XSS reported by Psicomante. Strings output for JavaScript display were not escaped properly. Due to how the Drupal.org policy limits security announcements to 'stable' software (that is not alpha packages like l10n_server), this fix is not accompanied by an SA. Links: http://cvs.drupal.org/diff.php?path=contributions/modules/l10n_server/l10n_c... http://cvs.drupal.org/diff.php?path=contributions/modules/l10n_server/l10n_c...