Commit ef20d7b4 authored by theo lem's avatar theo lem
Browse files

updating to drupal 7.72

parent ed3b947e
Drupal 7.72, 2020-06-17
-----------------------
- Fixed security issues:
- SA-CORE-2020-004
Drupal 7.71, 2020-06-03
-----------------------
- Fix for jQuery Form bug in Chromium-based browsers
......
......@@ -8,7 +8,7 @@
/**
* The current system version.
*/
define('VERSION', '7.71');
define('VERSION', '7.72');
/**
* Core API compatibility.
......
......@@ -1135,12 +1135,8 @@ function drupal_prepare_form($form_id, &$form, &$form_state) {
* Helper function to call form_set_error() if there is a token error.
*/
function _drupal_invalid_token_set_form_error() {
$path = current_path();
$query = drupal_get_query_parameters();
$url = url($path, array('query' => $query));
// Setting this error will cause the form to fail validation.
form_set_error('form_token', t('The form has become outdated. Copy any unsaved work in the form below and then <a href="@link">reload this page</a>.', array('@link' => $url)));
form_set_error('form_token', t('The form has become outdated. Press the back button, copy any unsaved work in the form, and then reload the page.'));
}
/**
......@@ -1181,6 +1177,11 @@ function drupal_validate_form($form_id, &$form, &$form_state) {
if (!empty($form['#token'])) {
if (!drupal_valid_token($form_state['values']['form_token'], $form['#token']) || !empty($form_state['invalid_token'])) {
_drupal_invalid_token_set_form_error();
// Ignore all submitted values.
$form_state['input'] = array();
$_POST = array();
// Make sure file uploads do not get processed.
$_FILES = array();
// Stop here and don't run any further validation handlers, because they
// could invoke non-safe operations which opens the door for CSRF
// vulnerabilities.
......@@ -1848,6 +1849,9 @@ function form_builder($form_id, &$element, &$form_state) {
_drupal_invalid_token_set_form_error();
// This value is checked in _form_builder_handle_input_element().
$form_state['invalid_token'] = TRUE;
// Ignore all submitted values.
$form_state['input'] = array();
$_POST = array();
// Make sure file uploads do not get processed.
$_FILES = array();
}
......
......@@ -7,7 +7,7 @@ files[] = aggregator.test
configure = admin/config/services/aggregator/settings
stylesheets[all][] = aggregator.css
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -5,7 +5,7 @@ version = VERSION
core = 7.x
hidden = TRUE
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -6,7 +6,7 @@ core = 7.x
files[] = block.test
configure = admin/structure/block
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -5,7 +5,7 @@ version = VERSION
core = 7.x
hidden = TRUE
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -13,7 +13,7 @@ regions[footer] = Footer
regions[highlighted] = Highlighted
regions[help] = Help
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -5,7 +5,7 @@ version = VERSION
core = 7.x
files[] = blog.test
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -7,7 +7,7 @@ files[] = book.test
configure = admin/content/book/settings
stylesheets[all][] = book.css
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -5,7 +5,7 @@ version = VERSION
core = 7.x
files[] = color.test
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -9,7 +9,7 @@ files[] = comment.test
configure = admin/content/comment
stylesheets[all][] = comment.css
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -6,7 +6,7 @@ core = 7.x
files[] = contact.test
configure = admin/structure/contact
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -5,7 +5,7 @@ version = VERSION
core = 7.x
files[] = contextual.test
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -7,7 +7,7 @@ files[] = dashboard.test
dependencies[] = block
configure = admin/dashboard/customize
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -5,7 +5,7 @@ version = VERSION
core = 7.x
files[] = dblog.test
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -11,7 +11,7 @@ dependencies[] = field_sql_storage
required = TRUE
stylesheets[all][] = theme/field.css
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -7,7 +7,7 @@ dependencies[] = field
files[] = field_sql_storage.test
required = TRUE
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -7,7 +7,7 @@ dependencies[] = field
dependencies[] = options
files[] = tests/list.test
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
......@@ -5,7 +5,7 @@ package = Testing
version = VERSION
hidden = TRUE
; Information added by Drupal.org packaging script on 2020-06-03
version = "7.71"
; Information added by Drupal.org packaging script on 2020-06-17
version = "7.72"
project = "drupal"
datestamp = "1591173070"
datestamp = "1592419104"
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment