[development] Slight API change in 4.6.10 and 4.7.4

Khalid B kb at 2bits.com
Wed Oct 25 04:15:55 UTC 2006


> > False positives / negatives may be present:
>
> > googlesearch
>
> This module (of which I am maintainer) has one form, which explicitly targets
> Google's search API.  It never actually posts back to Drupal itself.  Is it
> safe to assume, then, that it's a false positive and doesn't pose a security
> risk?  (If there's something I need to change, I will do so post haste, but
> it sounds like it's safe since the module does so little.)

Same with customerror.module. The grep on <form caught one of the patches
that are included with it. This module does not suffer from this
vulnerability, nor
is it broken by the fix.


More information about the development mailing list