« Changelog History


Backdrop CMS v1.14.2 Release Notes

Release Date: 2019-12-18 // over 4 years ago

  • 🚀 Maintenance release for Backdrop CMS. This update contains security updates, bug fixes, and usability improvements.

    ⚡️ Update information:

    • ⚡️ The database update script does not need to be run.
    • 🚀 No changes have been made to the .htaccess, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

    🔄 Changes since 1.14.1:

    • 🔒 SA-CORE-2019-017: Fix symlink and path traversal issues in ArchiveTar.
    • 🔒 SA-CORE-2019-016: Check config archives contain allowable files before import.
    • 🔒 SA-CORE-2019-015: Escape descriptions for file types.
    • 🔒 SA-CORE-2019-014: Escape HTML in node type names.
    • 🔒 SA-CORE-2019-013: Filter admin block titles and descriptions.
    • #4214: Capitalize "Reply-To" header.
    • #4221: Hide help text for min resolution if there is no limit set.
    • #4231: Prevent all tabelselect tables on a page from responding to any "Select all" checkbox.
    • 🚧 #4202: Fix documented path to maintenance mode page.
    • #4216: Allow empty max value for number fields.
    • #4193: Set file_temporary_path in initial system.core.json file.
    • 🚚 #4093: Remove the default color change behind the site name in Basis.
    • ✅ #4180: Fix broken test at midnight in testing timezone.
    • 🚚 #4135: Remove the hash at the beginning of lines in favor of our inline PHP comment indicator.
    • #4136: Delete backup file for flexible_template.png.
    • #4178: Standardize on label for file description text.
    • #2052: Let File delete files whether they exist or not.