Discuss whether we want an API routes audit status report
Problem/MotivationQuoting @xjm: Discuss whether the site owner should see a list or table on the page of the resources that are exposed. This is the user-facing complement of what /jsonapi provides...
View Article[meta] Decide on and implement additional security hardenings for JSON:API...
Problem/MotivationSee #3035979: [DISCUSSION] Should a facility be added to JSON:API which limits automatic exposure of all entities for prior related discussion.In #3035979-14: [DISCUSSION] Should a...
View ArticleDiscuss whether we want an entity access audit status report
Problem/MotivationSome contributed modules' entity types apparently ship with less-than-ideal (read: not quite secure by default) entity access control logic/ permissions.This is bad because:it results...
View ArticleClik here to view.
Fields with unlimited cardinality show 1 extra input field
If a field has unlimited cardinality, then it is always displayed with one input too many. For example, I added a textfield named "Labels" to a content type and gave it unlimited cardinality. I create...
View ArticlePHP7.1 vendor max Testing issue - DO NOT COMMIT
Problem/MotivationSince testbot only tests issues with the vendor versions in the composer lock file, we need a way to test against recent vendor updates in order to catch issues like #3039408:...
View ArticleAjax forms doesn't work properly with ajax views.
If we have views with AJAX enabled, that contains AJAX-forms in results (e.g. commerce AJAX add to cart forms), all forms will not work after view was updated. Reason is form action, that becomes...
View ArticleImprove the focus behaviour after clicking 'Save and select' in the...
Problem/MotivationThis is a follow-up of #2988431: [Meta] Accessibility plan for Media Library Widget. We have 2 remarks about where to shift the focus after adding new media items in the media...
View ArticleChange Simpletest UI from a test runner to a CLI snippet generator
The scripts/run-tests.sh script has matured a lot during D8, and become the preferred way to run tests (docs). It's main advantage is that there can be no leakage between the parent Drupal site and...
View Article[meta] Improvements to run-tests.sh
Problem/Motivationrun-tests.sh is pretty much the single most important piece of code in the Drupal QA process.It's basically impossible to search for the string 'run-tests.sh' so it's difficult to be...
View ArticleRemove tracker.pages.inc
Problem/MotivationTracker has the following controllers:TrackerPageTrackerUserRecentTrackerUserTabbut they are all just including tracker.pages.inc.Proposed resolutionAdds a single new controller that...
View ArticleFrequent random fail in...
Problem/MotivationSeen two different version of it probably around 5 times over the weekend:https://www.drupal.org/pift-ci-job/1294225https://www.drupal.org/pift-ci-job/12933781)...
View ArticleMedia Library can delete user customizations to the media view and therefore...
Problem/MotivationFrom #2962110-119: Add the Media Library module to Drupal core:[media_library.install is] assuming the original media library view was never customized, but that's not safe. I moved...
View Article[META] Roadmap to stabilize Media Library
For Drupal 8.6, we shipped with an experimental media library that:Provides a nice visual interface for browsing through all the media items in your siteCan be opened from a node form (or similar...
View ArticleClik here to view.
Random failures building media library form after uploading image.
Problem/MotivationThis was discovered while working on #3055648: Frequent random fail in \Drupal\Tests\media_library\FunctionalJavascript\MediaLibraryTest. There are a few random failures that persist...
View ArticleMake error messages for embedded media themeable
Problem/MotivationIn #2994696-198: Render embedded media items in CKEditor, @effulgentsia requested:This warrants a theme hook, so that themes can override the markup and classes."This" refers to the...
View ArticleReplace jQuery UI sortable with Sortable js
Problem/MotivationWe are in the process of deprecating jQuery UI in core. The jQueryUI sortable library is among the components that need to be removed/replaced. As mentioned in the parent issue:...
View ArticlePerformance Degradation in Layout Builder and other places likely
Problem/Motivation#2671964: ContextHandler cannot validate constraints brought in a major degradation in performance for pages that load large number of definitions. Example: Layout Builder,...
View ArticleLanguage browser detection caches the page of browser language for default...
Steps to re-create: - Enable "Browser"& "Url" negotiation for language detection. - Have two languages enabled (say English as default and Japanese as another language) (so English shows on the...
View ArticleFirst param type at Drupal.theme function should be a string
Problem/MotivationAt file drupal.es6.js for Drupal.theme function the first param type is set to {function}, but i think it sould be {string}. The example given there is Drupal.theme('placeholder',...
View ArticleAdd JavaScript polyfill for NodeList.forEach
Problem/MotivationThe syntax for looping over a NodeList using the forEach method is more concise and useful but is not supported in older browsers, specifically IE11.As Drupal core uses less and less...
View Article