User: dww Branch: HEAD Date: Wed, 07 Jan 2009 20:48:27 +0000 Modified files: /modules/project_issue issue.inc mail.inc project_issue.module project_issue.views.inc Log message: #355673 (SA-CONTRIB-2009-002) by hunmonk and dww: - Fixed potential access bypass during issue email notifications - Fixed XSS that is only possible if you have 'administer projects' Links: http://cvs.drupal.org/diff.php?path=contributions/modules/project_issue/issu... http://cvs.drupal.org/diff.php?path=contributions/modules/project_issue/mail... http://cvs.drupal.org/diff.php?path=contributions/modules/project_issue/proj... http://cvs.drupal.org/diff.php?path=contributions/modules/project_issue/proj...