XF 2.2 v2.2.3 text color issue after manual Security Fix
- Thread starter xml
- Start date
Solution
An updated patch is available with limited testing.
Download the appropriate patch for your version from the original announcement:
xenforo.com
Download the appropriate patch for your version from the original announcement:
XenForo 2.2.11 Released (Security Fix)
Today, we are releasing XenForo 2.2.11 to address a potential security vulnerability. We recommend that all customers running XenForo 2.2 upgrade to 2.2.11 or use the attached patch file as soon as possible. The issue relates to HTML attribute injection which can be triggered when rendering...
xenforo.com
Lee
Well-known member
XenForo 2.1.14 Released (Security Fix)
Note: This version supersedes the previously released XenForo 2.1.13. Today, we are releasing XenForo 2.1.14 to address a potential security vulnerability. We recommend that all customers still running XenForo 2.1 upgrade to 2.1.14 or use the attached patch file as soon as possible. The issue...
xenforo.com
xml
Active member
My version is 2.2.x not 2.1.xXenForo 2.1.14 Released (Security Fix)
Note: This version supersedes the previously released XenForo 2.1.13. Today, we are releasing XenForo 2.1.14 to address a potential security vulnerability. We recommend that all customers still running XenForo 2.1 upgrade to 2.1.14 or use the attached patch file as soon as possible. The issue...
xml
Active member
its exactly as mentioned here
XenForo 2.1.13 Released (Security Fix)
Today, we are releasing XenForo 2.1.13 to address a potential security vulnerability. We recommend that all customers still running XenForo 2.1 upgrade to 2.1.13 or use the attached patch file as soon as possible. The issue relates to HTML attribute injection which can be triggered when...
xenforo.com
Dragonfruit
Well-known member
Maybe try the full update instead of the manual patch?
xml
Active member
Full update is not an option for me now, the patch should function correctly as stated by Xenforo support team
Fixed - XenForo 2.1.13 breaks [color]
XenForo 2.1.13 breaks rendering editor HTML for [COLOR] as the implementation of this tag is different in XenForo 2.1 vs. XenForo 2.2 Backporting methods renderTagColor and isUsableColor in XF\BbCode\Renderer\Html from XenForo 2.2.11 seems to fix this
xenforo.com
Patches are only guaranteed to work with the previous released version e.g in this case 2.2.10
The current 2.2 patch won't work with 2.2.0-2.2.5 and needs basically the same changes as were done for the 2.1 patch
An updated patch is available with limited testing.
Download the appropriate patch for your version from the original announcement:
xenforo.com
Download the appropriate patch for your version from the original announcement:
XenForo 2.2.11 Released (Security Fix)
Today, we are releasing XenForo 2.2.11 to address a potential security vulnerability. We recommend that all customers running XenForo 2.2 upgrade to 2.2.11 or use the attached patch file as soon as possible. The issue relates to HTML attribute injection which can be triggered when rendering...
xenforo.com
