Xenforo security fix 2.2.1

[snoopy5]

Hi,

Xenforo just announced a new version 2.2.1

XenForo 2.2.1 Released (Includes Security Fix)

XenForo 2.2.1 is now available for all licensed customers to download. We strongly recommend that all customers running previous versions of XenForo 2.2 upgrade to this release to benefit from increased stability. Most importantly, this release fixes two potential security vulnerabilities in...

xenforo.com

Are there any changes needed in the templates Dimension and Illuminati, if I just upgraded to the template version for 2.2.0 yesterday?

 

[nodle]

Mine shows an outdated template.

 

[Ehren]

No template changes are needed for this. The only modified template file in xenfocus themes is PAGE_CONTAINER, so if that file isn't mentioned in changelogs, you can safely continue to use your current theme

@nodle - If your site mentions outdated templates, there's likely a different reason. What file is being mentioned?

 

[nodle]

No template changes are needed for this. The only modified template file in xenfocus themes is PAGE_CONTAINER, so if that file isn't mentioned in changelogs, you can safely continue to use your current theme

@nodle - If your site mentions outdated templates, there's likely a different reason. What file is being mentioned?

Mine shows PAGE_CONTAINER.

When viewing custom changes there are quite a few changes in red and green in there.

 

[Ehren]

Mine shows PAGE_CONTAINER.

When viewing custom changes there are quite a few changes in red and green in there.

Were you already using the 2.2.0 version of the theme? Or are you upgrading from the 2.1 version?

 

[nodle]

Were you already using the 2.2.0 version of the theme? Or are you upgrading from the 2.1 version?

I was just using your latest 2.2.0, I have never touched a template except for a few changes in the EXTRA.css file.

 

[Ehren]

Feel free to send me a username/password and I can take a look for you. Outdated templates should only be displayed if they have been modified in the past..

 

[nodle]

I see on another themes creators forum that they are having problems as well so there must had been changes to it.

 

[nodle]

Did you try the upgrade on your test board? Did yours not give you an error?

 

[Ehren]

Ah, you're right! Xenforo never mentioned any updates to the PAGE_CONTAINER file (they must have made a mistake since this appears to be the first time it's happened), so I could only assume no updates were needed.

I'll release the official updates soon, however if you'd like to upgrade your theme now, you can do so by opening PAGE_CONTAINER (in your child theme) and finding:

    <xf:if is="property('publicIconUrl')">
        <link rel="apple-touch-icon" href="{{ base_url(property('publicIconUrl', true)) }}">
    </xf:if>

Change to:

    <xf:if is="property('publicIconUrl')">
        <link rel="apple-touch-icon" href="{{ base_url(property('publicIconUrl', true)) }}">
    <xf:elseif is="property('publicMetadataLogoUrl')" />
        <link rel="apple-touch-icon" href="{{ base_url(property('publicMetadataLogoUrl')) }}" />
    </xf:if>