From fd4fd96740e8ccebe554fce29cda5167db2d09c9 Mon Sep 17 00:00:00 2001 From: Marton Kiss Date: Wed, 30 Aug 2017 16:49:26 +0200 Subject: [PATCH] Upgrade entity reference to 1.5 Fix entity reference module security issue: DRUPAL-SA-CONTRIB-2017-067 https://www.drupal.org/node/2902596 This patch removes the "Autocomplete widgets cannot reference a single entity result" https://drupal.org/node/1959624#comment-8451891 - it was merged as d8e3926 commit. Change-Id: If5b997dac31016e8ebaf3b5b1fc0216bd456b3b0 --- commons.make | 3 ++- patches/0019-commons-entity-reference-1.5.patch | 15 +++++++++++++++ 2 files changed, 17 insertions(+), 1 deletion(-) create mode 100644 patches/0019-commons-entity-reference-1.5.patch diff --git a/commons.make b/commons.make index e097585..eb043aa 100644 --- a/commons.make +++ b/commons.make @@ -15,4 +15,5 @@ projects[commons][patch][] = "patches/0014-commons-metatag-1.21.patch" projects[commons][patch][] = "patches/0015-commons-media-2.0.patch" projects[commons][patch][] = "patches/0016-commons-file_entity-2.3.patch" projects[commons][patch][] = "patches/0017-commons-media-2.9.patch" -projects[commons][patch][] = "patches/0018-commons-views-3.18.patch" \ No newline at end of file +projects[commons][patch][] = "patches/0018-commons-views-3.18.patch" +projects[commons][patch][] = "patches/0019-commons-entity-reference-1.5.patch" diff --git a/patches/0019-commons-entity-reference-1.5.patch b/patches/0019-commons-entity-reference-1.5.patch new file mode 100644 index 0000000..b03c873 --- /dev/null +++ b/patches/0019-commons-entity-reference-1.5.patch @@ -0,0 +1,15 @@ +--- commons.orig/drupal-org.make 2017-08-30 16:20:25.000000000 +0200 ++++ commons/drupal-org.make 2017-08-30 16:29:53.000000000 +0200 +@@ -131,11 +131,7 @@ + + projects[entityreference][type] = "module" + projects[entityreference][subdir] = "contrib" +-projects[entityreference][version] = "1.1" +- +-; Autocomplete widgets cannot reference a single entity result. +-; https://drupal.org/node/1959624#comment-8451891 +-projects[entityreference][patch][] = "https://drupal.org/files/issues/entityreference-autocomplete-widget-single-entity-1959624-6.patch" ++projects[entityreference][version] = "1.5" + + projects[entityreference_prepopulate][type] = "module" + projects[entityreference_prepopulate][subdir] = "contrib"