One form validation function should be able to bypass other validation steps
Transferred from https://security.drupal.org/node/134653 since this was determined to be a feature request for FAPI, as opposed to a security vulnerability.Problem/MotivationExample 1 reported by...
View ArticleClik here to view.
Add "Disable image resize" setting to image fields
Problem/MotivationSome of our customers want to disable the image autoresize when images exceeds the maximum resolution defined in the field settings. They just want Drupal to reject the image because...
View ArticleUse null coalescing assignment operator
Problem/MotivationFor example,A: in core/modules/jsonapi/src/Normalizer/ResourceObjectNormalizer.php, in function getNormalization, $base['links'] = $base['links'] ??...
View ArticleUse null coalescing assignment operator: multilignes case.
Problem/MotivationFor example,B: in core/modules/layout_discovery/layout_discovery.module, in function template_preprocess_layout, if (!isset($variables['content'][$name]['#attributes'])) {...
View ArticleLet GDToolkit support AVIF image format
Problem/MotivationAVIF image file format is getting traction in browsers' support.Write up with examples https://jakearchibald.com/2020/avif-has-landed/This issue is proposing to implement support to...
View ArticleAbout an ?: assignment operator.
Problem/MotivationIn #3423311: Use null coalescing assignment operator two cases are considered, A0: $A = $A ?? $B; B0:if (!isset($A)) { $A = $B; }and these two cases are changed to, $A ??= $B;Now what...
View ArticleClik here to view.
Provide helpful editing links on "admin/structure/block" for...
Problem/MotivationAs raised on #1938062-54: Convert the recent_comments block to a view it might be really useful to provide additional dropdown links on the block overview page.Some examples could be...
View ArticleClik here to view.
Active toolbar tray has weak affordance and fails WCAG color criteria
Problem/MotivationWhen a toolbar tray is open, the currently active tray is indicated as the "'odd one out". The current design uses a mild background gradient on the active button.Here the shortcuts...
View ArticleCached forms can have duplicate HTML IDs, which disrupts accessible form labels
Problem/MotivationIn some scenarios, Drupal renders form elements with id attribute collisions (duplicate DOM ids).This behavior has been observed when a cached page component, e.g. a search block or...
View ArticleAdd ability to insert Media inline in CKEditor widget
Problem/MotivationAt now Drupal Media entities can be inserted into CKEditor, using Media Library widget, only as block element. So there are no ways to insert inline image (eg small icon image into...
View ArticleClik here to view.
Differentiate visually dragging with and without hierarchy
Problem/MotivationDragging menu items or terms can have hierarchy and motion in 4 directions. Dragging blocks in block layout does not have hierarchy and only has up and down motion. User does not have...
View ArticleReplace multiple test methods in InfoParserUnitTest with 1 testInfoException...
Problem/MotivationIn \Drupal\Tests\Core\Extension\InfoParserUnitTest we have at least 8 test methods that do that same thingDefine a broken yml stringSet 2 yml files to use this exact same stringset an...
View ArticleLog every individual query in performance tests
Problem/MotivationWe're seeing random query counts causing test fails. Let's list every individual query so we can see which queries have gone missing or suddenly popped up.Steps to reproduceProposed...
View ArticleClik here to view.
Form suffix element breaks into multiple lines in modal
Problem/MotivationWhen entering a name for the new view model if you enter a specific number of characters the machine name will jump into the following row, based on the situation it can be confusing...
View ArticleCore security triage 2024-03-07
Attending: TODOExplanation: Some full and provisional members of the Drupal Security Team meet fortnightly to triage and discuss private core security issues. These meetings are essential to core...
View ArticleCore security triage 2024-02-22
Attending: benjifisher, poker10, drumm, larowlan, longwave, effulgentsia, mcdruidExplanation: Some full and provisional members of the Drupal Security Team meet fortnightly to triage and discuss...
View ArticleDeprecate Forum module in Drupal 10
Problem/MotivationDeprecated forum module in Drupal 10.1Steps to reproduceProposed resolutionRemaining tasksSee parent issue for issues that needs to be completed before this oneUser interface...
View ArticleSupport route aliasing (Symfony 5.4) and allow deprecating the route name
Problem/MotivationOver in #2723579: [PP-1] NodeRouteProvider should extend DefaultHtmlRouteProvider we are trying to deprecate 'node.add_page' and 'node.add' routes.The problem is these route names are...
View ArticlePrevent session garbage collection during functional tests
Problem/MotivationA stop gap until we can do #3033791: Do explicit session garbage collection on cron, which is non-trivial.Performance tests currently have to assert on a range of queries.One reason...
View ArticleDrupal Usability Meeting 2024-03-01
This meeting takes place every Friday at 14:00 UTC (currently 7:00am PT, 10:00am ET). See Time.is to see what that is in your timezone.The meetings are held using Zoom, and a link is posted in the #ux...
View Article