Problem/Motivation
Lets remove usage of "blacklist" and "whitelist" in \Drupal\Core\Security\RequestSanitizer and its test
They are:
- An historic bad labelling of people
- Provide no context: "what is listed in them"?
Proposed resolution
@see The CR:
- The
sanitize_input_whitelist
site setting has been renamed tosanitize_input_safe_keys
- Similarly, the
Drupal\Core\Security\RequestSanitizer::SANITIZE_WHITELIST
constant has been replaced withRequestSanitizer::SANITIZE_INPUT_SAFE_KEYS
. - Update all function parameter names, variables and code comments to reflect these changes.
Remaining tasks
Do the renames.Handle deprecated setting BC.See #3163226: Add the ability to deprecate a Settings name- Reviews / refinements.
- RTBC.
- Commit.
User interface changes
None
API changes
@see The CR:
- The
sanitize_input_whitelist
site setting has been renamed tosanitize_input_safe_keys
- Similarly, the
Drupal\Core\Security\RequestSanitizer::SANITIZE_WHITELIST
constant has been replaced withRequestSanitizer::SANITIZE_INPUT_SAFE_KEYS
.
Data model changes
N/A
Release notes snippet
TBD