Install

To start a new Drupal project with version 8.0.0-beta13@beta:

To update your site and all dependencies to the latest version of Drupal:

To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions

Using Composer to manage Drupal site dependencies

Downloads

Download drupal-8.0.0-beta13.tar.gztar.gz 10 MB
MD5: 1e872066cc6bf8c072341740825ff141
SHA-1: c8426d4edc775176e4431f3cdd422e700f4f9316
SHA-256: 8813f82154424d8ea7e8926aedafab4999961f47f6235fe27f48ad760cdaffb2
Download drupal-8.0.0-beta13.zipzip 18.17 MB
MD5: 67be27d43a48928eeb51ba48a7013169
SHA-1: c48ff0a046c6d58d672cbc198176681ab19d6597
SHA-256: 54b494c8df56a8614a430613874b93d455b4127220c45cb286b7d3390a6c5c3e

Release notes

Betas are good testing targets for developers and site builders who are comfortable reporting (and where possible, fixing) their own bugs, and who are prepared to rebuild their test sites from scratch when necessary. Beta releases are not recommended for non-technical users, nor for production websites, and could have public security vulnerabilities. More information on beta releases.

hook_update_N() is now required for all core schema changes. This means it may be possible to update development sites between beta releases starting with beta12. This has not been tested on real sites so in either case ensure you take a database backup and carefully review your site for regressions when updating.

Note that there are still critical bugs with the database update system itself, which may prevent some contributed or custom modules from providing their own upgrade paths.

All core patches should continue providing hook_update_N() from this point on where necessary.

Known issues

#2527126: Only send X-Drupal-Cache-Tags and -Contexts headers when developer explicitly enables them introduced a regression in the page cache and has since been rolled back, beta 14 includes that fix. The page cache will not be invalidated via cache tags for anonymous users in beta13. If you rely on this behaviour, a workaround is to set $settings['reverse_proxy'] = TRUE; in settings.php

There are still around 10 known critical issues with this beta release that need to be resolved before we will create a release candidate.

Search the issue queue for known issues

.

Changes since 8.0.0-beta12

  • 8.0.0-beta13
  • #2538228 by alexpott, amateescu: Document that Config save/delete/rename events may be dispatched during hook_update_N(), what that means for subscribers, and fix core subscribers accordingly
  • #2429659 by chx, Berdir, mpdonadio, geerlingguy, Cottser, rteijeiro, Fabianx, catch, dawehner: Race conditions in the twig template cache
  • #2535118 by longwave, Wim Leers, borisson_, effulgentsia: Toolbar subtrees not working on admin pages due to lack of theme negotiation on Toolbar's custom JSONP route
  • #2540954 by mikeryan: Move module-specific migration support into the dblog module
  • #2538158 by joyceg: Clarification to where hook_modules_installed should be implemented
  • #2541420 by amateescu, chx: Introduce QueryConditionTrait
  • #2533994 by phenaproxima: Move module-specific migration support into the block_content module
  • #2534034 followup by mikeryan: Move module-specific migration support into the taxonomy module
  • #2534032 by mikeryan: Move module-specific migration support into the system module
  • #2534030 by mikeryan: Move module-specific migration support into the syslog module
  • #2534016 by phenaproxima: Move module-specific migration support into the forum module
  • #2534018 by phenaproxima: Move module-specific migration support into the locale module
  • #2534020 by phenaproxima: Move module-specific migration support into the menu_link_content module
  • #2540538 by znerol: Behavior of testErrorContainer() and testExceptionContainer() is unpredictable
  • #2514044 by dawehner, stefan.r, alexpott: Do not use SafeMarkup::format in exceptions
  • #2534024 by mikeryan: Move module-specific migration support into the search module
  • #2534014 by phenaproxima: Move module-specific migration support into the filter module
  • #2534002 by phenaproxima: Move module-specific migration support into the book module
  • #2533986 by phenaproxima: Move module-specific migration support into the block module
  • #2533984 by phenaproxima: Move module-specific migration support into the aggregator module
  • #2533980 by phenaproxima: Move module-specific migration support into the action module
  • #2534026 by mikeryan: Move module-specific migration support into the simpletest module
  • #2534034 by mikeryan: Move module-specific migration support into the taxonomy module
  • #2534036 by mikeryan: Move module-specific migration support into the text module
  • #2534038 by mikeryan: Move module-specific migration support into the update module
  • #2490228 by damiankloip, almaudoh, martin107, clemens.tolboom, -enzo-, znerol, dawehner: Add Authentication Collector
  • #2534156 by mikeryan: Move module-specific migration support into the path module
  • #2498785 by damiankloip, dawehner: Remove ViewExecutable::getMenuLinks(), its just wrong
  • #2534028 by mikeryan: Move module-specific migration support into the statistics module
  • #2539258 by cilefen: Inject the cache bin into TwigEnvironment
  • #2541094 by dawehner: Get rid of strtr in Html::getId()
  • #2541318 by dawehner: Get rid of strtr in Crypt
  • #2078803 by Wim Leers, aspilicious, wmortada, Sumit kumar, mrjmd, John Cook: Change contextual links background color to match the styleguide
  • #2501481 by Cottser, davidhernandez, kfriend, alimac, YesCT, lauriii, tim.plunkett, cilefen, lbainbridge, porchlight: form_select_options() is a theme function in disguise and should not use SafeMarkup::set
  • #1894396 by Mile23, Crell, catch: Mark db_*() wrappers in database.inc as @deprecated for 9.x
  • #2541084 by martin107, dawehner: ViewPageController does not need $storage nor $executableFactory
  • #2507093 by claudiu.cristea, catch, timmillwood, dawehner: Don't calculate the theme_token for ajaxPageState unless necessary
  • #2521946 by eiriksm: JSDoc field_ui module
  • #2498163 by Arla, jeni_dc, nathanlawson91, MrPaulDriver, LewisNyman: Legend overlap with radios/checkboxes inside fieldset/fieldgroup
  • #2539860 by jeni_dc, LewisNyman: Add a class to field that contain user-generated formatted text
  • #2499793 by mikeryan, phenaproxima: Several migrate_drupal migrations fatal error on count()
  • #2516842 by er.pushpinderrana, thejacer87, jhodgdon: UPGRADE.txt should explain where to find release notes
  • #2382513 by mikeker, chris_hall_hu_cheng, joachim, joelpittet, alexpott, YesCT, quietone, mikeker, Jeroen, joris_lucius, katy5289, sivaji@knackforge.com: Regression fix: allow Drupal 8 to work without Apache mod_rewrite
  • #2538982 by dawehner, pwolanin, Fabianx: Get rid of strtr in UrlGenerator, it is not needed
  • #2535364 by mikeryan: Missing dependency in d6_vocabulary_field_instance
  • #2529514 by dawehner, Fabianx, Wim Leers: Replace system.filter::protocols with container parameters
  • #2534006 by phenaproxima: Move module-specific migration support into the contact module
  • #2539300 by cilefen, tim.plunkett: Remove SafeMarkup::set in \Drupal\Tests\Core\Form\FormCacheTest::testSetCacheWithSafeStrings()
  • #2521832 by neclimdul, Crell, amateescu: Uncomment StatementInterface methods
  • #2505965 by olli: Remove dead code related to old views ui modal
  • #2540764 by borisson_: Fix error in documentation that was added in #2533768
  • #2527126 by dawehner, Wim Leers, hass: Only send cache context/tags if frontend proxy exists
  • #2537600 by DuaelFr: An empty path on search pages settings leads to an infinit redirection loop
  • #972528 by mkalkbrenner, harijari, ryanissamson, mikeytown2, haripalrao, kasperg: dblog fails to log MAX_ALLOWED_PACKET errors because they're longer than MAX_ALLOWED_PACKET
  • #2507727 by mikeker, olli: Adding an "All taxonomy terms" field results in "Invalid parameter number" error
  • #2537602 by hchonov, dawehner: JQuery ajax GET requests result in "406 Not Acceptable"
  • #2443679 followup by chx: PostgreSQL: Fix taxonomy\Tests\TermTest
  • #2342521 by JacobSanford, ecrown, dylanf, martin107, bburg, donquixote, dcmul, jhodgdon, Crell, pcorbett: Docblock fixes for core/lib/Drupal/Core/Database/Connection.php
  • #2528178 by dawehner, amateescu, larowlan, tim.plunkett, jibran, catch, jhodgdon, effulgentsia, Berdir: Provide an upgrade path for blocks context IDs #2354889 (context manager)
  • #2426967 by mortendk, BarisW, joelpittet, akalata, jwilson3, Manjit.Singh, joginderpc, rteijeiro, mgifford, LewisNyman, Manuel Garcia, markconroy: Feed icon should be a CSS background image not a image file
  • #2489578 by Manjit.Singh, saki007ster, pjbaert, Cottser, jhodgdon, epophoto: Move search.theme.css to classy
  • #2538294 by Aki Tendo: Formally declare public scope in \Drupal\Core\Template\TwigNodeVisitor
  • #2497693 by marvin_B8, joshi.rohit100, borisson_, Crell: Add PSR-7 to Symfony Response View listener
  • #2534926 by chx, jhodgdon: EntityFormBuilderInterface doxygen needs a little love
  • #2475231 by jcnventura, mgifford, xjm: Content translation header in content type edit form is not styled correctly
  • #2501183 by borisson_, dileepmaurya, Gábor Hojtsy, Berdir: LocaleLookup cache ID is using numeric indexes of the roles field, not role ID's
  • #2534780 by olli, dawehner: Fatal error rendering fields using an optional relationship
  • #2532970 by Xano, tim.plunkett, jhodgdon: PluginFormInterface must document $form means the plugin's own elements
  • #2535192 by chx, dawehner, jhodgdon: Security: LoggerChannelInterface doxygen needs a little love
  • #2465751 by andypost, JeroenT, RavindraSingh, tim.plunkett, Berdir: Remove config_test_load() and replace with entity_load
  • #2512062 by dsnopek, tim.plunkett, Wim Leers: VariantInterface extends ConfigurablePluginInterface so PageDisplayVariantSelectionEvent should allow passing configuration to the Variant (to enable Panels Everywhere)
  • #2532148 by timmillwood, davidwbarratt: Modules cannot be put in ./modules/vendor
  • #2536906 by aspilicious: Warning when saving third party settings while no settings available
  • #2533768 by Wim Leers, lauriii: Add the user entity cache tag to user.* cache contexts that need it
  • #2056089 by BarisW, TR, mgifford, rodvolpe, Dom., nambisolo, nod_, katewelling, Manjit.Singh, jhodgdon, Bojhan, Wim Leers: UI problems on the Modules/Extend page
  • #2536508 by Aki Tendo: Content Negotiation Test showing up as a core module
  • #2489830 by cilefen, davidhernandez, dcmul, Adam Clarey, joshi.rohit100, rpayanm, sqndr, Cottser, lauriii: Improve theme compatibility error message
  • #2430397 by Wim Leers, Fabianx: When mapping cache contexts to cache keys, include the cache context ID for easier debugging
  • #2513094 by hchonov, pfrenssen, mkalkbrenner, yched, Berdir: ContentEntityBase::getTranslatedField and ContentEntityBase::__clone break field reference to parent entity
  • #2500499 by phenaproxima, bdimaggio: Migration path for dblog 7.x
  • #2500529 by phenaproxima, bdimaggio: Migration path for Syslog 7.x configuration
  • #2534158 by phenaproxima, mikeryan: MigrateFullDrupalTestBase must use dynamic test discovery
  • #2536212 by chx: Link CronInterface to the handbook page
  • #2401159 by kim.pepper, Jaesin: Convert instances of Guzzle getBody(TRUE)
  • #2508830 by s_leu, pivica: Various UI problem with autocomplete select control
  • #2533822 by alexpott: Duplicate array keys in CssOptimizerUnitTest resulting in missing test coverage
  • #2539310 by neclimdul, alexpott: BackendCompilerPassTest::testProcess fails when sqlite not installed
  • Revert "Issue #2492429 by mikeryan: Migration count caching broken"
  • #2338081 by pwolanin, dawehner, effulgentsia, kgoel, vijaycs85, mpdonadio, chx, brandon.holtsclaw, alexpott, Gábor Hojtsy, Fabianx, catch, YesCT, JvE: Local Tasks, Actions, and Contextual links mark strings from derivatives (or alter hooks) as safe and translated
  • #2524082 by pfrenssen, Gábor Hojtsy, Wim Leers, Berdir, Fabianx, dawehner, catch: Config overrides should provide cacheability metadata
  • #2525884 by jesperjb, joshi.rohit100, Berdir: Avoid unecessary cache tag invalidations in ConfigEntityBase and aggregator Item entity
  • #2536644 by tim.plunkett: generate-proxy-class.php should generate the same file regardless of a missing leading slash
  • #2536448 by vbouchet: First param of ViewsUIController::edit() is documented wrong
  • #2535586 by andypost: Clean-up "links" templates from removed "html" option
  • #2535284 by jibran: Move block_install hook to block.install file
  • #2492429 by mikeryan: Migration count caching broken
  • #2529616 by andypost: Move CurrentLanguageContext to Core\Language\ContextProvider
  • #2409701 by tstoeckler, Leksat, Schnitzel, _nolocation, Gábor Hojtsy, xjm: Field storage configuration is not exposed to config translation UI
  • #2531408 by chx, dawehner: Default backend database driver
  • #2527846 by dawehner, Wim Leers: Try to get rid of Url::fromRoute() in system_js_settings_alter()
  • #2497275 by borisson_, alexpott, dawehner, Gábor Hojtsy: ~50 calls to t() for two strings in LanguageManager() on every request
  • Revert "Issue #2497275 by borisson_, alexpott: ~50 calls to t() for two strings in LanguageManager() on every request"
  • #2497275 by borisson_, alexpott: ~50 calls to t() for two strings in LanguageManager() on every request
  • #2536456 by mbovan, Berdir, Wim Leers, dawehner: Autocomplete is broken (its JS it not loaded)
  • Revert "Issue #2510104 by pwolanin, nod_, Fabianx, Wim Leers, droplet, Pere Orga: Convert drupalSettings from JavaScript to JSON, to allow for CSP in the future"
  • #2535302 by mbaynton, Berdir, kgoel, claudiu.cristea, tim.plunkett, RavindraSingh, cilefen, dawehner: Selecting too many files with JS off causes WSOD with data loss
  • #2498599 by Cottser, naveenvalecha, webchick, karolus, cilefen: Remove sdboyer/gliph since it is unused by core
  • #2505315 by stefan.r, dawehner, tim.plunkett, Berdir: Catch PHP7 Throwable objects instead of BaseExceptions in the error handler
  • #2024695 by olli, SpadXIII: The "Reset" button ignores the "Use AJAX" setting (always behaves in a non-AJAX way)
  • #2525910 by dawehner, effulgentsia, Berdir, lauriii, larowlan, timmillwood, Wim Leers, chx, arlinsandbulte, Fabianx, Gábor Hojtsy, Dave Reid, alexpott, catch: Ensure token replacements have cacheability + attachments metadata and that it is bubbled in any case
  • #2535082 by alexpott, jhedstrom, xjm, plach, Fabianx, effulgentsia, Berdir: Allow hook_update_N() implementations to run before the automated entity updates
  • #2493911 by dawehner, larowlan, damiankloip, hussainweb, jibran, cilefen, benjy, iMiksu, mtdowling: Update guzzle, goutte and mink-goutte-driver to the latest release
  • #2408013 by Aki Tendo, alexpott, Fabianx, dawehner, Crell, jhodgdon, Wim Leers, aspilicious: Adding Assertions to Drupal - Test Tools
  • #2531972 by dawehner: Move ThemeManager::theme() to ThemeManager::render()
  • #2536678 by alexpott: SimpletestTestForm broken
  • #2536880 by alexpott: CKEditor admin form broken
  • #2506581 by alexpott, Wim Leers, Fabianx, xjm, joelpittet, Cottser, dawehner: Remove SafeMarkup::set() from Renderer::doRender
  • #2082315 by Wim Leers, realityloop, mrjmd: Tracker history markers ("new" and "updated" markers, "x new replies" links) forces render caching to be per user
  • #2533946 by alexpott: UncaughtExceptionTest is a monkey in the control room
  • #2471232 by borisson_, JeroenT, sorressean, rbmboogie, ruha, mariancalinro: Optimize Cache::merge*(), by only accepting 2 instead of N arguments
  • #2512106 by cilefen, droplet, alexpott: Inline templates are XSS filtered incorrectly
  • #2507831 by dawehner, tim.plunkett, effulgentsia: Harden redirect responses to make external URIs opt in (was SA-CORE-2015-002 foward-port)
  • Revert "Issue #2228217 by pwolanin, ecrown, neclimdul, Fabianx, dawehner, klausi: Further optimize RouteProvider and add web test for large number of path parts"
  • #2228217 by pwolanin, ecrown, neclimdul, Fabianx, dawehner, klausi: Further optimize RouteProvider and add web test for large number of path parts
  • #2532490 by tim.plunkett, dawehner, Wim Leers, Crell, mtift: Unrouted URLs break toolbar but are hidden by caching
  • #2462907 by tstoeckler, penyaskito, Gábor Hojtsy, miro_dietiker: Entity operations to field UI shown in config overview
  • #2496897 by sasanikolic, Arla, dawehner, miro_dietiker, Berdir: Throw helpful exception if link templates are missing leading /
  • #2504141 by alexpott, tim.plunkett, larowlan, David_Rothstein, dawehner: Information disclosure/open redirect vulnerability via blocks that contain a form
  • #2534830 by Wim Leers: Toolbar subtrees not working
  • #2534856 by Dave Reid: Remove unused _toolbar_get_user_cid()
  • #2529144 by phenaproxima: Create cckfield plugin for text fields
  • #2506151 by joelpittet, Cottser, lauriii, Lukas von Blarer, tim.plunkett: Make the Twig extension link() accept Attribute objects
  • #2382859 by rpayanm, mondrake, ianthomas_uk: Remove file_stream_wrapper_get_*() and file_get_stream_wrappers()
  • #2498691 by cilefen, mesch, deepakaryan1988, RavindraSingh, honzakuchar, darol100, kattekrab, Cottser, David_Rothstein: "Install and set as default" link on the Appearance page doesn't work
  • #2299361 by trgreen17, wadmiraal, naveenvalecha, er.pushpinderrana, neetu morwani, jhodgdon, joachim: description of drupalGetTestFiles() is vague and has a typo; simpletest_generate_file() needs help too
  • #2534516 by webflo: Fix NodeAccessControlHandlerInterface doxygen
  • #2351015 by plach, effulgentsia, Wim Leers, dawehner, martin107, damiankloip, cilefen, Fabianx, catch, pwolanin, Damien Tournoud, znerol, YesCT, larowlan: URL generation does not bubble cache contexts
  • #2151103 by twistor, kerby70, ParisLiakos, cilefen: Zend feed plugins are incorrectly registered
  • #2454829 by maxocub, eiriksm, rvilar, Gábor Hojtsy, penyaskito, tstoeckler, Jose Reyero: Configuration translation UI does not support plural sources/targets
  • #2533222 by neclimdul, Berdir: Fix ConfigEntityBaseUnitTest
  • #2424805 by mdrummond, YesCT, vijaycs85, xjm, marcoscano, ifrik, joelpittet, Jelle_S, attiks, lauriii: Toolbar can no longer switch horizontal and vertical -- expects breakpoints ordered from smallest to largest; responsive images need largest to smallest
  • #2466931 by mikeker, Fabianx, dawehner, joelpittet: Valid Twig syntax is incorrectly escaped in Views rewrites
  • #2528242 by timmillwood: Add color-* classes to all rows on the status page
  • #2522652 by neclimdul, phenaproxima, prajaankit, benjy: Add getTemplateByName method to TemplateStorage
  • #2526412 by neclimdul, hussainweb, Fabianx: Remove Singleton hack in registerWithSymfonyGuesser
  • #2532604 by alexpott: Fix reference to "var drupalSettings" in NoJavaScriptAnonymousTest
  • #2488960 by cilefen, joshi.rohit100, naveenvalecha: Upgrade egulias/EmailValidator to 1.2.9
  • #2512132 by Wim Leers, effulgentsia, Fabianx: Make CSRF links cacheable
  • #2482625 by mbovan, Berdir, dawehner: Views entity reference selection with autocomplete widget broken
  • #2522002 by pwolanin, fgm, znerol: Do not strip www. from cookie domain by default because that leaks session cookies to subdomains
  • #2392109 by jacob.embree, dcmul, ByronNorris, jhedstrom: Filter: Allow plus sign in email addresses
  • #2533168 by neclimdul, Berdir: Fix BlockRepositoryTest
  • #2509650 by willzyx: Faulty dependency to Renderer in Drupal\comment\CommentLazyBuilders
  • #2532616 by TR: "return" used instead of "@return" in RoleInterface::isAdmin() docblock
  • #2532944 by chx, dawehner: AliasManagerInterface lacks doxygen
  • #2533034 by chx, webflo: AliasWhitelistInterface doxygen missing
  • #2527708 by joshi.rohit100, chx, jhodgdon, alexpott: Improve documentation for TypedConfigManagerInterface
  • #2486983 by metzlerd, jhodgdon, tim.plunkett: Document Text Input Form Elements
  • #2533360 by hussainweb: Upgrade to Symfony 2.7.2
  • #2532618 by TR: "return" used instead of "@return" in documentation
  • #2532646 by TR: "@return boolean" is wrong, use "@return bool"
  • #2531636 by Lucasljj, olli: Remove unnecessary extra space in dialogs
  • #2533218 by mpdonadio: Resolve todo for Symfony #12349
  • #2514168 by phenaproxima, mikeryan, benjy: Streamline migrate_drupal integration tests
  • #2527064 by jboxberger, tstoeckler: Nested condition groups in entity queries are broken
  • Revert "Issue #2527064 by tstoeckler: Nested condition groups in entity queries are broken"
  • #2493033 by Berdir, Wim Leers, lauriii, Fabianx, effulgentsia, dawehner, catch, msonnabaum, Crell, webchick: Make 'user.permissions' a required cache context
  • #2217985 by Berdir, Wim Leers: Replace the custom menu caching strategy in Toolbar with Core's standard caching
  • #2532434 by alexpott: UncaughtException test doesn't quite uncatch everything
  • #2531258 by neclimdul: Improve \Drupal\Tests\user\Unit\PermissionHandlerTest::testBuildPermissionsSortPerModule
  • #2530936 by webflo: Ensure that the classloader prefix is really unique
  • #1838242 by jhedstrom, pivica, tim.plunkett, bojanz, GaëlG, mpdonadio, dawehner, olli, Lendude: Provide Views integration for datetime field
  • #2526004 by andypost: UnpublishByKeywordComment should inject needed services properly
  • #2531568 by willzyx: Remove obsolete hook_menu() from responsive_image module
  • #2531622 by colbol: The description for the responsive image module admin link should end with a period.
  • #2530908 by olli: Caching problem in PageTitleTest
  • #278958 by jhodgdon, pwolanin, mgifford: Advanced search form has usability issues
  • #2409415 by phenaproxima, hosef: Variable to config: aggregator.settings [d7]
  • #2531028 by Berdir, neclimdul: Null migrate destination is a reserved keyword in PHP 7
  • #2513586 by kfitz, cilefen, jhodgdon, Bojhan, eliza411, ivanstegic, LewisNyman, lunk_rat, nickrosencrans, stpaultim, webchick: Remove the word "positive" from the "Must include a positive keyword with three characters or more." error message
  • #2525068 by daffie, googletorp: Document the class variable Node::in_preview as will stay public
  • #2528688 by phenaproxima: Create cckfield plugin for file fields
  • #2521774 by naveenvalecha: Add new line at the EOF in system_test.permissions.yml file
  • #2392559 by mondrake, mitrpaka, JeroenT, rpayanm, adci_contributor, ianthomas_uk: Remove all uses of file_stream_wrapper_get_* and file_get_stream_wrappers
  • #2472431 by davidhernandez, yannickoo, cilefen, LewisNyman: Do not load normalize.css in all themes, load it in Classy
  • #2502009 by joelpittet, Cottser, Wim Leers: Remove SafeMarkup::set in SearchExtraTypeSearch::execute()
  • #2500013 by Berdir, Wim Leers, plach: Add cacheability metadata information to translation overview
  • #2527064 by tstoeckler: Nested condition groups in entity queries are broken
  • #2504967 by hussainweb, joshtaylor, jibran, Berdir: Upgrade to Symfony 2.7.1
  • #2502785 by dawehner, effulgentsia, tim.plunkett, amateescu, Fabianx, Wim Leers, catch, dsnopek, EclipseGc, yched, Berdir, larowlan, mondrake, olli: Remove support for $form_state->setCached() for GET requests
  • #2532082 by mbovan: Replace SafeMarkup::filterXss() with SafeMarkup::xssFilter() in method documentation
  • #2321969 by rpayanm, subhojit777, prics, LinL, JeroenT, Temoor, prashantgoel, Mile23, pcambra, Sumi: Replace all instances of file_load(), file_load_multiple(), entity_load('file') and entity_load_multiple('file') with static method calls
  • #1963978 by joelpittet, NickWilde, jmolivas, dimaro, lauriii, Manuel Garcia, 2ndmile, Cottser, tim.plunkett: Convert theme_views_ui_build_group_filter_form() to Twig
  • #2510104 by pwolanin, nod_, Fabianx, Wim Leers, droplet, Pere Orga: Convert drupalSettings from JavaScript to JSON, to allow for CSP in the future
  • #2506195 by alexpott, joelpittet, xjm, David_Rothstein, Fabianx, pwolanin: Remove SafeMarkup::set() from Xss::filter()
  • #2261669 by Berdir, timmillwood, jhedstrom: Slow query in NodeRevisionAccessCheck
  • #2512456 by tim.plunkett, legolasbo, MattA, dawehner, googletorp, darol100, Bojhan, webchick, andypost, ivanstegic, larowlan, lauriii, LewisNyman, tkoleary, rickvug, eliza411, lunk_rat, nickrosencrans, stpaultim, Mark LaCroix: Implement the new block layout design to emphasize the primary interaction of placing a block
  • #2505989 by alexpott, dawehner, olli: Controllers render caching at the top level and setting a custom page title lose the title on render cache hits
  • #2507967 by tim.plunkett: \Drupal\Core\Entity\Controller\EntityViewController::buildTitle() assumes the is in the render array
  • #2508231 by timmillwood, amateescu, hussainweb, catch, dawehner, David_Rothstein, Mixologic, effulgentsia: Raise minimum required version of PHP to 5.5.9
  • #2529442 by neclimdul: Random phpunit failures in EntityUnitTest
  • #2509600 by andypost: AggregatorFeedBlock should return render array
  • #2529082 by timmillwood: Set better version for mikey179/vfsStream
  • #2508623 by xjm: Remove Frando from MAINTAINERS.txt
  • #2513692 by pameeela, naveenvalecha, andypost: Remove tim-e from Maintainers.txt for contact module. Add jibran and andypost
  • #2354889 by larowlan, dawehner, lauriii, Berdir, catch, martin107, pfrenssen, EclipseGc, Fabianx, Wim Leers, dsnopek, jibran, tim.plunkett, andypost: Make block context faster by removing onBlock event and replace it with loading from a ContextManager
  • #2512866 by lauriii, Berdir, Wim Leers, Fabianx, effulgentsia, catch, dawehner: CacheContextsManager::optimizeTokens() optimizes ['user', 'user.permissions'] to ['user'] without adding cache tags to invalidate that when the user's roles are modified
  • #2528292 by Fabianx, dawehner: Decouple Error testing from relying on a cached on disk-container that is created by a different Kernel
  • #2477413 by daffie, Crell, bzrudi71, stefan.r, catch, mradcliffe, chx: Increase minimum version requirement for Postgres to 9.1.2
  • #2527816 by jhedstrom, pfrenssen, chx, catch: Logic error in SqlContentEntityStorage::countFieldData() attempts to drop `name` column
  • #2526458 by cilefen, googletorp, alexpott: Test XSS filtering of slogan in SystemBrandingBlock
  • #2527406 by Gábor Hojtsy, Berdir: CommentForm::init() and MessageForm::init() are useless/broken
  • #2525002 by daffie, benjy: Make the class variables protected for Migration
  • #2528414 by jhedstrom: Block visibility by path docs are missing leading slash
  • #2525870 by pwolanin, willzyx, Fabianx: Regression: machine name inputs no longer work properly after #2508735
  • #2527638 followup by xjm: Fix duplicated setUp() method in MigrateDrupal7TestBase
  • #2514998 by tim.plunkett: Reduce fragility in the monolithic BlockListBuilder
  • #2527606 by dawehner, plach, catch, mpdonadio, Wim Leers, xjm, Fabianx: Uncaught PHP Exception LogicException when editing Views
  • Revert "Issue #2527606 by dawehner, plach, mpdonadio, xjm, Wim Leers, Fabianx: Uncaught PHP Exception LogicException when editing Views"
  • #2493665 by Fabianx, dawehner, msonnabaum, catch: Add centralized container invalidation method
  • #2527606 by dawehner, plach, mpdonadio, xjm, Wim Leers, Fabianx: Uncaught PHP Exception LogicException when editing Views
  • #2512718 by Berdir, pfrenssen, Wim Leers, Fabianx, dawehner, catch, effulgentsia, plach, Gábor Hojtsy: EntityManager::getTranslationFromContext() should add the content language cache context to the entity
  • #2527638 by phenaproxima: MigrateDrupal7TestBase never installs Drupal 7 migrations
  • #2428861 by tbradbury, Nitesh Sethia, neetu morwani, deepakaryan1988, Sagar Ramgade, yogen.prasad, Daniel_Rose, Cottser, jhodgdon, Sutharsan, leeotzu: user.html.twig documentation refers to a nonexistent 'account' variable
  • #2491259 by Chernous_dn, rudraram, jhodgdon, LewisNyman, mortendk: move search.admin.css into seven
  • #2527076 by daffie: Make the class variables protected for Drupal\Core\Datetime\Entity\DateFormat
  • #2527710 by Fabianx: Decouple Error testing from running with container builder
  • #2516866 by willzyx: Faulty dependency to RedirectDestination in Drupal\menu_ui\Plugin\Menu\LocalAction\LocalActionDefault
  • #2513612 by davidhernandez, ivanstegic, Bojhan, eliza411, LewisNyman, lunk_rat, nickrosencrans, stpaultim, webchick: Make the autocomplete form option text for an entity reference not be all caps
  • #2522600 by neclimdul, phenaproxima: Remove CMI dependency from Migration Templates
  • #2527486 by alexpott: --browser in run-tests.sh broken
  • #2512210 by trgreen17, jhodgdon, liberatr: SimpleTest - WebTestBase method creates binary-text files when the intention was to create text files, and text file creation is broken
  • #2328883 by andypost, dawehner: menu ui route used in menu link content
  • #2516802 by Dave Reid: FilterProcessResult->merge() results in PHP warning: Missing argument 1 for FilterProcessResult::__construct()
  • #2522120 by jhedstrom: DbDumpCommand should add collation information to the generated script
  • #1835016 by googletorp, nod_, KarenS, Sharique, Nitesh Sethia, mpdonadio: Polyfill date input type
  • #2497691 by Crell, cilefen, marvin_B8, dawehner: Include Symfony PSR-7 bridge library
  • #2453175 by tim.plunkett, plach, rteijeiro, effulgentsia, eshta, dawehner, fago, Berdir, alexpott: Remove EntityFormInterface::validate() and stop using button-level validation by default in entity forms
  • #2492585 by pguillard, yarik.lutsiuk, andypost, Mile23: Deprecate comment_view() & comment_view_multiple()
  • #2501701 by akalata, pwolanin, lauriii, GreenSkunk, cdulude, joelpittet, Cottser: Remove SafeMarkup::set in template_preprocess_color_scheme_form()
  • #2526462 by Mile23: Mark entity_get_bundles() as @deprecated for 9.x
  • #2513646 by pwolanin, alexpott: Role name is unescaped on block admin via JS
  • #2450993 by Wim Leers, Fabianx, Crell, dawehner, effulgentsia: Rendered Cache Metadata created during the main controller request gets lost
  • #2509898 by dawehner, znerol, larowlan, lauriii, Aki Tendo, Wim Leers: Additional uncaught exception thrown while handling exception after service changes
  • #2478459 by plach, mkalkbrenner, chx, yched, Berdir, dawehner, benjy: FieldItemInterface methods are only invoked for SQL storage and are inconsistent with hooks
  • #2508547 by tim.plunkett, tannerjfco, neclimdul: Placing a block with same machine name of region causes region to disappear in admin UI
  • #2526084 by andypost, yarik.lutsiuk: Fix comment in Comment entity
  • #2513568 by cilefen, ivanstegic, Bojhan, webchick, eliza411, LewisNyman, lunk_rat, nickrosencrans, stpaultim: Relabel "Configuration Management"
  • #911352 followup: Fix comment wrapping.
  • #911352 by Liam Morland, Crell: Document that foreign keys may not be used by all DB drivers
  • #2511806 by claudiu.cristea, sumitmadan, znerol, neetu morwani, jhodgdon: Fix documentation in password hashing class
  • #2516690 by mlevasseur, joshi.rohit100: Missing test for "Help" links per module on "Extend" admin page
  • #2505721 by eiriksm, nod_, jhodgdon: JSDoc color module
  • #2505669 by pwolanin, jcloys, joshi.rohit100, dawehner, Wim Leers, kgoel, larowlan: Inject render service into LinkGenerator instead of calling drupal_render
  • Revert "Issue #2505669 by pwolanin, jcloys, joshi.rohit100: Inject render service into LinkGenerator instead of calling drupal_render"
  • #2505669 by pwolanin, jcloys, joshi.rohit100: Inject render service into LinkGenerator instead of calling drupal_render
  • #2511584 by jhedstrom, rpayanm: Move NodeFormButtonsTest::assertButtons() to a trait
  • #2507911 by mikebell_, dylanf, naveenvalecha, deepakaryan1988, kfitz, jhodgdon, webchick, Charles Belov: Mention location of settings.php in UPGRADE.txt
  • #2514092 by neclimdul: Fix typo in drupal_attach_tabledrag
  • #2314825 by kay_v, jhedstrom: incomplete instructions in INSTALL.txt
  • #2501903 by pguillard, Manjit.Singh: inline form errors classnames to follow namestandard
  • #2512734 by Wim Leers, dawehner, Berdir: session_test routes/controllers don't specify the appropriate cacheability metadata
  • #2474363 by Aki Tendo, alexpott, Dom., MattA, dawehner, TR, hass, Wim Leers, cburschka, Berdir: Stuck in failed module install process
  • #2514052 by phenaproxima: Remove migrate_drupal's MigratePluginManager implementation
  • #2513132 by klausi: Remove duplicated getDataDefinition() method in EntityAdapter
  • #2509628 by andypost: TranslationStatusForm::buildForm() should not use drupal_render()
  • #2512820 by JvE, pwolanin: 'administer actions' permission can be abused - needs to be flagged as restricted
  • #2512580 by Wim Leers: NodeEntityViewModeAlterTest uses State to dynamically affect hook_entity_view_mode_alter()
  • #2443323 by Wim Leers, Nitesh Sethia, yched, Fabianx, jhodgdon: New convention: CacheContextInterface implementations should mention their ID in their class-level docblock
  • #2502021 by willzyx, Saphyel, dawehner, DuaelFr, b0unty, cilefen, larowlan, lauriii: Unhandled exception when trying to register a duplicate user
  • #2421503 by lauriii, larowlan, Wim Leers, dawehner, tim.plunkett: SA-CORE-2014-002 forward port only checks internal cache
  • #2508679 by tim.plunkett, Fabianx: Fix empty redirects and redirects with options in \Drupal\field_ui\FieldUI::getNextDestination()
  • #2502571 by pjonckiere, mpdonadio, catch, jhodgdon: Date format granularity should only render adjacent units
  • #2498919 by stefan.r, Berdir, catch: Node::isPublished() and Node::getOwnerId() are expensive
  • #2508627 by rvtraveller, pwolanin: Changing email address should invalidate one-time login links
  • #2375695 by Berdir, EclipseGc, tim.plunkett, Wim Leers, Fabianx, dawehner: Condition plugins should provide cache contexts AND cacheability metadata needs to be exposed
  • #2513244 by Berdir, Wim Leers, EclipseGc, Fabianx: ContextHandler incorrectly checks required/optional contexts of plugins
  • #2463909 by phenaproxima, mikeryan: Migrations should support non-installed default configurations (templates)
  • #2513264 by moshe weitzman, webflo: Fix bad class reference
  • #2309215 by googletorp, subhojit777, lokeoke, tadityar, crowdcg, aneek, joelpittet, jhedstrom, alexpott, lauriii, amankanoria: HTML double-escaping in revision messages
  • #1831798 by darol100, pjonckiere, rhuffstedtler, ifrik, paul.linney, rajneeshb, batigolix, jhodgdon: Update hook_help() for config manager module
  • #2448681 by jeqq: Remove obsolete todo from MenuTreeParameters class
  • #2512444 by MattA: Unused namespaces in EntityDeriver.php
  • #2509512 by chx: Redundant code in StaticMapTest::setUp
  • #2514136 by pwolanin, Fabianx: Add default clickjacking defense to core
  • #2188165 by tim.plunkett, dww: [Regression] View term filter 'is/not empty' and 'not one of' operators do not work
  • #2516078 by cilefen, naveenvalecha: Upgrade doctrine/lexer to v1.0.1
  • #2494063 by tohesi, trwad, dcmul, droplet, nod_, naveenvalecha: Update Backbone to 1.2.1
  • #2513396 by Cottser, larowlan, HelloNewman, webchick, crowdg, Bojhan, eliza411, ivanstegic, LewisNyman, lunk_rat, nickrosencrans, stpaultim: There is no link, anywhere, to a contact form once a user creates it
  • #2517114 by joshi.rohit100, cilefen: Remove needless, wrongly-placed system_test.permissions.yml file
  • #2513626 by cilefen, akalata, Les Lim: [Regression] Module permission links missing from module list page
  • #2477853 by ingaro, daffie, bzrudi71, mradcliffe, alexpott: PostgreSQL: Add support for reserved field/column names
  • #2508735 by darol100, dawehner, pwolanin, Chi, Fabianx, tim.plunkett: Code injection via preg_replace()
  • #2487498 by Cristian.Andrei, Scott Weston, iMiksu: Make randomString always return a > to avoid random test fails
  • #2463581 by Wim Leers, swentel: #cache_redirect cache items should have an 'expire' timestamp that matches the merged max-age
  • #2487600 by dawehner, Wim Leers, fgm: #access should support AccessResultInterface objects or better has to always use it
  • #2443679 by bzrudi71, daffie, mradcliffe, alexpott: PostgreSQL: Fix taxonomy\Tests\TermTest
  • #2511854 by NickWilde, cilefen: Datetime select list uses PHP non-OOP datetime functions
  • #2408371 by dawehner, Fabianx, alexpott, bforchhammer: Proxies of module interfaces don't work
  • Back to dev.

What’s next?

  1. Learn how to install Drupal
  2. Learn how to update Drupal
  3. Extend Drupal to do more
  4. Get training
  5. Check out what others built
Created by: catch
Created on: 29 Jul 2015 at 18:25 UTC
Last updated: 12 Mar 2018 at 20:24 UTC
Insecure

Other releases