Visit Drupal NES Home Page
Icon API Release Notes
1 version
Comprehensive release notes and changelog for Icon API, including security patches, bug fixes, and feature updates across all supported versions.
Jun 25, 2026
Latest: 7.1.1
June 2026
7.1.1
Released Jun 25, 2026 Full Version:
7.1.1+7.1.0:icon
Notes
This is the initial NES release of the Icon API module.
Changes
- Fixed cross-site scripting in the Icon API: Menu submodule by sanitizing the Title Wrapper Class value before rendering it into menu link markup.
- The vulnerable field requires the administer menu icons permission and could allow JavaScript injection through a crafted title wrapper class value.
- Added SimpleTest coverage for title wrapper class sanitization.
Stay in the loop
~/herodevs-spring-framework-support
herodevs@nes:open-source$ ./display-support-info.sh