xmlsitemap_node: Do not add unpublished nodes.

Closes #2266933

xmlsitemap_node/xmlsitemap_node.module

@@ -325,6 +325,12 @@ function xmlsitemap_node_view_access($node, $account = NULL) {
     return TRUE;
   }
 
+  // After all other relevant preconditions have been checked, deny access if
+  // the node is unpublished (and the user has no special permission to view unpublished above):
+  if ($node->status == 0) {
+    return FALSE;
+  }
+
   // If the module did not override the access rights, use those set in the
   // node_access table.
   if ($op != 'create' && $node->nid) {