markie's picture

Posted by markie on August 5, 2013 at 9:42pm

Team
I am trying to get the mp3 player module back from the dead. I've been working with @greggles to address some issues and he recommended I post here to get a module review so I can a) gain maintainer status and b) bring the module back to life. To address the security concerns I have done a few things

1) I have moved the external swf to the libraries folder so it's not part of the module and can be updated outside of the module.
2) Filtered the themed output so adding malicious scripts in the input fail
3) Filtered form input for further protection.

Please take a look at the patch at https://drupal.org/node/2050425 it should take care of the 4 security issues (https://drupal.org/node/717184, https://drupal.org/node/1959284, https://drupal.org/node/916554 & https://drupal.org/node/1043722). If there's more work to be done, I'd be happy to continue.

Thanks!
mark

This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds: