Thank you @kghector for the security report!
* Fixed XSS exploit with SteamProfile badge
An XSS exploit was found that could potentially inject unsafe scripts into forum pages. It is recommended that you upgrade to this release immediately.
Due to the nature of this exploit I'm providing a fix for the 1.6 branch (for XenForo 1.5+) as well as the 1.5 branch of Steam Authentication (for XenForo 1.3.x and 1.4.x).
The 1.5 branch file is attached to this post.
Do you accept pull requests?
Trying to figure out how to add the steam tab to the side pannel with the other ribbons on the main boards? Any idea why it does not show up? Using the UI.X theme.
You can change the execution order in ACP -> Appearance -> Template Modifications -> message_user_info under Steam Auth. Looks like another addon is executing their template modifications after Steam Auth. If changing the execution order doesn't fix it, it's using the old hook system and I can't resolve that.
Isnt message_user_info only for the block when posting messages? Or is this the same template the infoblock on the profile page?
You can manually add the steam_message_user_info into your template. The third party theme must deviate from the normal XenForo coding structure.