a vulnerability in phpMailer (jMailer) (#437).
temp directory was not protected and content of compiled ini file was readable, when creating an application with createapp. Added some .htaccess files (#415).
simple php tags should not be allowed in template (#426)
sql error on dbAclDriver::getRight when a user is not in a group (#412)
jforms:
jControllerDaoCrud: datas of controls with multiple values are not loaded for the view action (#433)
jDbTools, mysql driver : in some version of PHP/mysql, the default value on a field is not always an empty string or a null value (#432)
calling jCoordinator::getController twice for the same controller generates an error (#416)
problem with the cookie path in jAuth (#435)
Generated scripts under windows should contain path with slashes (#419)
error of context in junittests controller (#421)
the INSTALL file was not updated (#411)