Update Drupal to 7.88 incl. SA-CORE-2022-003

kayakr · Feb 16, 2022 · 8eb03f7 · 8eb03f7
1 parent 5c536cb
commit 8eb03f7
Show file tree

Hide file tree

Showing 135 changed files with 403 additions and 398 deletions.
diff --git a/docroot/CHANGELOG.txt b/docroot/CHANGELOG.txt
@@ -1,3 +1,8 @@
+Drupal 7.88, 2022-02-15
+-----------------------
+- Fixed security issues:
+   - SA-CORE-2022-003
+
 Drupal 7.87, 2022-01-19
 -----------------------
 - Fix regression caused by jQuery UI position() backport

diff --git a/docroot/includes/bootstrap.inc b/docroot/includes/bootstrap.inc
@@ -8,7 +8,7 @@
 /**
  * The current system version.
  */
-define('VERSION', '7.87');
+define('VERSION', '7.88');
 
 /**
  * Core API compatibility.

diff --git a/docroot/includes/form.inc b/docroot/includes/form.inc
@@ -2087,7 +2087,7 @@ function _form_builder_handle_input_element($form_id, &$element, &$form_state) {
   // #access=FALSE on an element usually allow access for some users, so forms
   // submitted with drupal_form_submit() may bypass access restriction and be
   // treated as high-privilege users instead.
-  $process_input = empty($element['#disabled']) && (($form_state['programmed'] && $form_state['programmed_bypass_access_check']) || ($form_state['process_input'] && (!isset($element['#access']) || $element['#access'])));
+  $process_input = empty($element['#disabled']) && ($element['#type'] !== 'value') && (($form_state['programmed'] && $form_state['programmed_bypass_access_check']) || ($form_state['process_input'] && (!isset($element['#access']) || $element['#access'])));
 
   // Set the element's #value property.
   if (!isset($element['#value']) && !array_key_exists('#value', $element)) {

diff --git a/docroot/modules/aggregator/aggregator.info b/docroot/modules/aggregator/aggregator.info
@@ -7,7 +7,7 @@ files[] = aggregator.test
 configure = admin/config/services/aggregator/settings
 stylesheets[all][] = aggregator.css
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/aggregator/tests/aggregator_test.info b/docroot/modules/aggregator/tests/aggregator_test.info
@@ -5,7 +5,7 @@ version = VERSION
 core = 7.x
 hidden = TRUE
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/block/block.info b/docroot/modules/block/block.info
@@ -6,7 +6,7 @@ core = 7.x
 files[] = block.test
 configure = admin/structure/block
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/block/tests/block_test.info b/docroot/modules/block/tests/block_test.info
@@ -5,7 +5,7 @@ version = VERSION
 core = 7.x
 hidden = TRUE
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/block/tests/themes/block_test_theme/block_test_theme.info b/docroot/modules/block/tests/themes/block_test_theme/block_test_theme.info
@@ -13,7 +13,7 @@ regions[footer] = Footer
 regions[highlighted] = Highlighted
 regions[help] = Help
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/blog/blog.info b/docroot/modules/blog/blog.info
@@ -5,7 +5,7 @@ version = VERSION
 core = 7.x
 files[] = blog.test
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/book/book.info b/docroot/modules/book/book.info
@@ -7,7 +7,7 @@ files[] = book.test
 configure = admin/content/book/settings
 stylesheets[all][] = book.css
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/color/color.info b/docroot/modules/color/color.info
@@ -5,7 +5,7 @@ version = VERSION
 core = 7.x
 files[] = color.test
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/comment/comment.info b/docroot/modules/comment/comment.info
@@ -9,7 +9,7 @@ files[] = comment.test
 configure = admin/content/comment
 stylesheets[all][] = comment.css
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/contact/contact.info b/docroot/modules/contact/contact.info
@@ -6,7 +6,7 @@ core = 7.x
 files[] = contact.test
 configure = admin/structure/contact
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/contextual/contextual.info b/docroot/modules/contextual/contextual.info
@@ -5,7 +5,7 @@ version = VERSION
 core = 7.x
 files[] = contextual.test
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/dashboard/dashboard.info b/docroot/modules/dashboard/dashboard.info
@@ -7,7 +7,7 @@ files[] = dashboard.test
 dependencies[] = block
 configure = admin/dashboard/customize
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/dblog/dblog.info b/docroot/modules/dblog/dblog.info
@@ -5,7 +5,7 @@ version = VERSION
 core = 7.x
 files[] = dblog.test
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/field/field.info b/docroot/modules/field/field.info
@@ -11,7 +11,7 @@ dependencies[] = field_sql_storage
 required = TRUE
 stylesheets[all][] = theme/field.css
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/field/modules/field_sql_storage/field_sql_storage.info b/docroot/modules/field/modules/field_sql_storage/field_sql_storage.info
@@ -7,7 +7,7 @@ dependencies[] = field
 files[] = field_sql_storage.test
 required = TRUE
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/field/modules/list/list.info b/docroot/modules/field/modules/list/list.info
@@ -7,7 +7,7 @@ dependencies[] = field
 dependencies[] = options
 files[] = tests/list.test
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/field/modules/list/tests/list_test.info b/docroot/modules/field/modules/list/tests/list_test.info
@@ -5,7 +5,7 @@ package = Testing
 version = VERSION
 hidden = TRUE
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/field/modules/number/number.info b/docroot/modules/field/modules/number/number.info
@@ -6,7 +6,7 @@ core = 7.x
 dependencies[] = field
 files[] = number.test
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/field/modules/options/options.info b/docroot/modules/field/modules/options/options.info
@@ -6,7 +6,7 @@ core = 7.x
 dependencies[] = field
 files[] = options.test
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/field/modules/text/text.info b/docroot/modules/field/modules/text/text.info
@@ -7,7 +7,7 @@ dependencies[] = field
 files[] = text.test
 required = TRUE
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/field/tests/field_test.info b/docroot/modules/field/tests/field_test.info
@@ -6,7 +6,7 @@ files[] = field_test.entity.inc
 version = VERSION
 hidden = TRUE
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/field_ui/field_ui.info b/docroot/modules/field_ui/field_ui.info
@@ -6,7 +6,7 @@ core = 7.x
 dependencies[] = field
 files[] = field_ui.test
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/file/file.info b/docroot/modules/file/file.info
@@ -6,7 +6,7 @@ core = 7.x
 dependencies[] = field
 files[] = tests/file.test
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/file/tests/file_module_test.info b/docroot/modules/file/tests/file_module_test.info
@@ -5,7 +5,7 @@ version = VERSION
 core = 7.x
 hidden = TRUE
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/filter/filter.info b/docroot/modules/filter/filter.info
@@ -7,7 +7,7 @@ files[] = filter.test
 required = TRUE
 configure = admin/config/content/formats
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/forum/forum.info b/docroot/modules/forum/forum.info
@@ -9,7 +9,7 @@ files[] = forum.test
 configure = admin/structure/forum
 stylesheets[all][] = forum.css
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/help/help.info b/docroot/modules/help/help.info
@@ -5,7 +5,7 @@ version = VERSION
 core = 7.x
 files[] = help.test
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/image/image.info b/docroot/modules/image/image.info
@@ -7,7 +7,7 @@ dependencies[] = file
 files[] = image.test
 configure = admin/config/media/image-styles
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/image/tests/image_module_test.info b/docroot/modules/image/tests/image_module_test.info
@@ -6,7 +6,7 @@ core = 7.x
 files[] = image_module_test.module
 hidden = TRUE
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/locale/locale.info b/docroot/modules/locale/locale.info
@@ -6,7 +6,7 @@ core = 7.x
 files[] = locale.test
 configure = admin/config/regional/language
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/locale/tests/locale_test.info b/docroot/modules/locale/tests/locale_test.info
@@ -5,7 +5,7 @@ package = Testing
 version = VERSION
 hidden = TRUE
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/menu/menu.info b/docroot/modules/menu/menu.info
@@ -6,7 +6,7 @@ core = 7.x
 files[] = menu.test
 configure = admin/structure/menu
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"
diff --git a/docroot/modules/node/node.info b/docroot/modules/node/node.info
@@ -9,7 +9,7 @@ required = TRUE
 configure = admin/structure/types
 stylesheets[all][] = node.css
 
-; Information added by Drupal.org packaging script on 2022-01-19
-version = "7.87"
+; Information added by Drupal.org packaging script on 2022-02-16
+version = "7.88"
 project = "drupal"
-datestamp = "1642633901"
+datestamp = "1645030312"