Modernize file.module forms
Part of #2072251: [meta] Modernize forms to use FormBaseUpdated: Comment #NProblem/MotivationNow that #2059245: Add a FormBase class containing useful methods is in, I was looking at old forms that...
View Article[Policy] Define explicit Drupal 10 end of life date of early December 2026...
Problem/MotivationCurrently, depending on the release of Drupal 12, Drupal 10 may be end of life mid-June, early August or early December in 2026. See #3449806: [12.x] [meta] Release Drupal 12 in 2026...
View ArticleNodeRouteProvider should extend DefaultHtmlRouteProvider
Problem/MotivationNodeRouteProvider does not extend DefaultHtmlRouteProvider, as a result NodeRouteProvider contains a lot of duplicate code and doesn't follow patterns of other entity types for some...
View ArticleAdd an API for comparing the (current) route name that takes into account...
Problem/MotivationIn #3159210: Support route aliasing (Symfony 5.4) and allow deprecating the route name we added the ability to deprecate routes, but we later found that usages of...
View ArticleViews 'Sort by', 'Asc' and 'Desc' are not full...
Problem/MotivationI created a view with exposed sort for a multilanguage site. I can translate the 'Sort by', 'Asc' and 'Desc' within the view into ONE (other) language but not by the translation system.
View ArticleExposed filter operators for Integer field when using List (integer) field.
Problem/MotivationViews filters operators for numeric list fields are only "Is one of", "Is all of", "Is none of", "Is empty (NULL)", "Is not empty (NOT NULL)", but numeric filters like "Is equal to",...
View ArticleConvert getSourceFilterType to match
Problem/MotivationgetSourceFilterType($filter_id) has a switch statement that should really use match.Steps to reproduceProposed resolutionRemaining tasksUser interface changesIntroduced terminologyAPI...
View ArticleConsider showing all revisions on the revision overview
Problem/Motivation#2713587: NodeController::revisionOverview() shows no revisions if node has no translation for current language brought up again that we have a conflict between trying to show only...
View ArticlePassing a $options array to constraint constructors is deprecated, use named...
Problem/MotivationNew deprecation in Symfony 7.3 via #3522353: Update Composer dependencies for 11.2.0Since symfony/validator 7.3: Passing an array of options to configure the "..." constraint is...
View ArticleCustom Core Twig Filter "format_date" conflicts with twig/intl-extra
Problem/MotivationSome twig functions are not part of Twig core, but come with twig/intl-extra, like:format_currencyformat_dateformat_datetimeformat_timeformat_number...To be able to use them, I...
View ArticleDisallow low user password reset timeout, impose reasonable minimum
Problem/MotivationDiscovered in #3436164: Add validation constraints to user.settings.@see https://git.drupalcode.org/project/drupal/-/merge_requests/7412#note_298722The current password reset timeout...
View ArticleBad usage of the PHP hash_equals function
After discussing this with the security team, I'm publicly reposting the following issue :Hi,The core of drupal is using the PHP function hash_equals in multiple places. The way this function is used...
View ArticleClik here to view.
Don't automatically set a cookie domain
Problem/MotivationIn SessionConfiguration we always set a cookie domain even if one is not configured. If the current domain is example.com the cookie domain is set to .example.com and if the domain is...
View Article[regression] User roles field access is inconsistent, users with...
Problem/MotivationThis is approved as a public security hardening in #25.Access to modify a users role is handled inconsistently. The user access control handler incorrectly allows users with...
View ArticleSplit up and refactor system_requirements() into OOP hooks
Problem/MotivationSystem requirements needs refactoring, it does far too much.Steps to reproduceOpen system.installProposed resolutionConvert update and runtime requirement phases to the new:...
View ArticleClik here to view.
Basic Auth module conflicts with server-level "Site Lock"...
Problem/MotivationMany platforms and development environments use Basic Auth configured on the server to provide a Site Lock. This allows making sites available to select people via the public web...
View ArticleAdd constraint for Current Theme Condition theme so it can be FullyValidatable
Problem/MotivationAdd constraint for Current Theme Condition theme so it can be FullyValidatableSteps to reproduceProposed resolutionsystem.schema.yml hascondition.plugin.current_theme: type:...
View ArticleAccording to the WCAG guidelines decorative images should not have an...
the webeditor uloads an image and fills in the alt-text and places the image in the content (or refers to it). According to the wcag guidelines decorative images should not have an alt-text but this...
View Article.container-inline: nested checkbox should not get the trailing ":"
Problem/MotivationNesting a checkbox under a .container-inline container form element causes it to get a ":" appended via CSS (:after pseudo-element). Individual radio elements inside a radios group as...
View ArticleInvalid config structures can result in exceptions when saving a config entity
Problem/MotivationPulled from original post So far, it was always a property inside a views filter, where it expects value to be a string but it's an array.Pulled from #44This is specific to views...
View Article