danny-englander / drupal-color-styles Goto Github PK

This module contains XSS exploits for the title, color and text values.
You need to use check_plain, check_markup etc.

Also, content-type plugins have built in configuration forms, allowing each instance to define its own configuration, avoiding the need for the hook_menu, the settings form and the use of the variables table.
This would mean each pane could be customised instead of global.