XF 2.1 2.1.7 Security Upgrade - approval_queue_macros content

[Joe Link]

We just upgraded to 2.1.7 on one of our sites and compared approval_queue_macros to the html file attached to the update announcement.

In the upgraded template line 63 reads (same as our non-patched 2.1.6 installs):

<span class="message-attribution-opposite">{$typePhraseHtml|raw}</span>

In the patch html file it reads:

<span class="message-attribution-opposite">{$typePhraseHtml|strip_tags}</span>

I assume it's supposed to be the latter, but I want to confirm (and make sure the update made it into the 2.1.7 upgrade).

 

[Mike]

The fix in 2.1.7 itself is different and does not require a template edit. The template edit is just a workaround (and can be reverted after upgrading to 2.1.7).

 

[Joe Link]

Perfect, thanks for clearing it up