diff --git a/core/CHANGELOG.txt b/core/CHANGELOG.txt index 55f399c..a5e9315 100644 --- a/core/CHANGELOG.txt +++ b/core/CHANGELOG.txt @@ -1,5 +1,5 @@ Drupal 8.0.x, xxxx-xx-xx (development version) ----------------------- +------------------------ The following is a list of the most important changes made to Drupal in 8.0.0. For a detailed list of changes with background information, see @@ -26,8 +26,8 @@ https://www.drupal.org/list-changes/drupal * Updated to jQuery UI 1.11.4. * Removed jquery.bbq. * Removed the Garland theme from core. - * Removed the Overlay module from core but kept the functionality with a - simple but dynamic "Back to site" link. + * Removed the Overlay module from core and replaced it with a simple, + dynamic "Back to site" link. * Improved the asset library system to manage CSS and JavaScript files and their dependencies. Allowing for smaller AJAX request payloads. * jQuery is no longer loaded on all pages, only when another asset needs it. @@ -51,7 +51,7 @@ https://www.drupal.org/list-changes/drupal * Added the tour module to provide highly contextual tips for UI elements. - Improved the entity system: * Added a full CRUD API for entities. - * Completed the field API and improved the Entity Query API. + * Improved the field API and entity query API. * Added support for widgets, formatters and translation to base entity fields (such as labels). * Made view modes configurable for reusable display variants. @@ -73,7 +73,7 @@ https://www.drupal.org/list-changes/drupal * Provided the ability to override configuration values with language variants and other runtime values. * Added configuration schema, dependencies, and validation to maintain - data-integrity between deployments and updates. + data integrity between deployments and updates. * Support added for both global configuration and configuration entities. - Improved authoring experience: * Redesigned the content creation and editing form. @@ -89,13 +89,12 @@ https://www.drupal.org/list-changes/drupal images, blockquotes, code snippets, videos… * Made possible to in-place edit any entity: nodes, blocks… * Added Text Editor module to help map other editors to text formats. -- Made media management (a little) easier: +- Improved media management: * Added ability to configure when unused files get deleted with the option to keep them. Useful for media libraries. * Added a customizable view under the content administration screen that lists all files uploaded on the system. - * Made it possible to use drag-and-drop for instant uploads, when using file - fields. Even multiple files at once. + * Made file uploads immediate when selecting files in file fields. * Added local image input filter, to enable secure image posting. - Included the following Symfony2 components: * ClassLoader - PSR-0-compatible autoload routines. @@ -154,8 +153,6 @@ https://www.drupal.org/list-changes/drupal * All Gettext files are now imported in chunks, better for low resource environments. * Automated import and update of translations in the installer and later. - * Added language fallback possibility in interface translation (no UI in - core though to configure it). * Improved content language support: * Made it possible to assign language to taxonomy terms, vocabularies, menu items, and files. @@ -185,6 +182,7 @@ https://www.drupal.org/list-changes/drupal * Removed textgroups support from interface translation in favor of native configuration language support. * Added a transliteration API. (Only used for machine names in core.) + * Added a language fallback capability to the interface translation API. - New field types added to core: * Email * Link @@ -193,13 +191,13 @@ https://www.drupal.org/list-changes/drupal * Date - Made commenting more flexible: * Added the notion of comment types (for reviews, greetings, and so on), - which may take different fields on their own. + each of which can be configured with a different set of fields. * Made commenting a field to allow comment threads on entity types other than nodes. - Added Views and Views UI module to core: * Added simple bulk operations functionality to Views. - * Converted various core listings: /node, several blocks blocks, - /admin/content/node and /admin/people to views. + * Converted various core listings to views, including /node, + /admin/content/node, /admin/people, and several blocks. * Built in REST API support. * Rewrote caching integration for better performance. * Made it possible to configure responsive tables in Views. @@ -209,7 +207,7 @@ https://www.drupal.org/list-changes/drupal * Added ability to place all blocks multiple times. * Introduced a block library with categorized blocks. - Introduced an accessible modal API based on improvements made in collaboration - with the jQuery UI team and the Views team. + with the jQuery UI team. - Made it possible to add fields to contact forms allowing site-builders to easily build custom forms for soliciting feedback from users. - Added a Web Services module package. @@ -243,23 +241,22 @@ https://www.drupal.org/list-changes/drupal - Added the migrate module (experimental) with support for migrating content and configuration from earlier Drupal versions. - Introduced support for Composer. -- Moved the automated cron execution functionality to its own module, so it can - be turned off on sites that don't need it. +- Moved the automated cron execution functionality to its own module. - Refactored IP address based banning functionality to its own module. - Security improvements: * Removed PHP filter, including the ability to use PHP for block visibility. - * Managing fields for each entity type is now a separate (secure) - permission. - * PDO MySQL limited to executing single statements to limit SQLi vectors. - * Twig autoescape to provide output-filtering and prevent XSS vectors. + * Managing fields for each entity type is now a separate permission. + * PDO drivers other than MySQL are now limited to executing single + statements to limit SQL injection vectors. + * Added an autoescape API to prevent cross-site scripting in many of the + places where Drupal outputs HTML. * Hardened user session and session ID handling. * Automated CSRF protection in route definitions. * Clickjacking protection enabled by default. - * Core JavaScript API Compatible with CSP. + * Made the core JavaScript API compatible with Content Security Policy + (CSP). * Trusted host patterns enforced for requests preventing cache and link poisoning. - * User content entry and filtering improved, and more tightly integrated - with WYSIWYG editors. - Switched to semantic versioning with significant updates planned every 6 months in 8.1, 8.2, etc.