Fedora 21: SA-CONTRIB-2015-130 High: XSS Issue in Drupal7-Migrate

The migrate module provides a flexible framework for migrating content into

Drupal from other sources (e.g., when converting a web site from another CMS

to Drupal). Out-of-the-box, support for creating core Drupal objects such as

nodes, users, files, terms, and comments are included - it can easily be

extended for migrating other kinds of content. Content is imported and rolled

back using a bundled web interface (Migrate UI module) or included Drush

commands (strongly recommended [1]).

This package provides the following Drupal modules:

* migrate

* migrate_example

* migrate_example_baseball

* migrate_example_oracle

* migrate_ui

[1] https://

## 7.x-2.8

**See [SA-CONTRIB-2015-130](https://)

**Features and enhancements**

* Issue #2379289: migrate-import --update does not seem to work as expected, if map is not joinable, due to highwater field? * Issue #2403643: Migration::applyMappings() unable to handle multifield subfields * Issue #2472045: Add language subfields only if field is translatable * Issue #2474809: Obtuse error message when migration dependencies are missing * Issue #2397791: MigrationBase::handleException should handle multiple errors via field_attach_validate() * Issue #2309563: Add support for running migrations via wildcard name * Issue #2095841: Add MigrationBase methods to enable/disable mail system. * Issue #2419373: Performance improvement when using Source migrations in combination with MigrateSQLMap * Issue #2141687: Make error messages include more information when migrating files

**Bug fixes**

* Field sanitization added to prevent possibility of XSS - see security advisory https:// ...