ID: 3315
Title: Builtin icon visibility now can be correctly reset
Component: Multisite
Level: 1
Class: Bug Fix
Version: 1.2.9i1
After changing an icon to {{Show in column}} you could never reset this back
without a restart of the site Apache. This has been fixed.
ID: 3314
Title: Correctly add custom user attribute values after change in attribute declaration
Component: WATO
Level: 1
Class: Bug Fix
Version: 1.2.9i1
If you redeclared this attributes as "make available for notifications" it would
be added only after once modifying any actual user. This has been fixed.
ID: 3297
Title: Fixes possible XSS in views sidebar snapin
Component: Multisite
Level: 1
Class: Security Fix
Version: 1.2.9i1
Authenticated and permitted users could create views using
a topic which might contains HTML code, for example script tags,
that where executed when having the view listed in the views snapin.
Making the JS code be executed by other users is only possible with
view publish permissions which normally only admin users have.