Install

Works with Drupal: ^10.3 || ^11

Using Composer to manage Drupal site dependencies

Alternative installation files

Download tar.gz 21.86 KB
MD5: ff494e1dd1cb900d52f8168267a12a35
SHA-1: 08fae2df8c99c0067aa603bb95de500f92ade3fb
SHA-256: b80f2c4d0f6ab306d8ecda65e88dc6311e61138a77ac4b1d2b3f4fac670a73cb
Download zip 31.92 KB
MD5: 07ce5477f089a4156c893dfe92e07c35
SHA-1: c0b401b9d0183dc560f46fb0da7a7c7f82247326
SHA-256: becf33d7ffbcd72aa4d0f3daa2add34bde839a5f6a3fed2c78dcaf64162b342d
Downloads are for manual installation, which is not recommended when using Drupal 8 or later.

Security issues fixed

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the following security announcements and release notes:

Release notes

Fixes major secuirty issue.

IMPORTANT:
The Twig Tweak support added in Twig Tweak/Plugin Blocks support introduced this security issue and had to be reverted. Rendering an AJAX Block in Twig Tweak *with custom configuration* is no longer supported (by design).

After updating, only blocks stored as block configuration entities (placed through Structure → Block layout) can be loaded through the route. Blocks created from a plugin id and configuration, for example with drupal_block(), are no longer supported. See the module's README for details and a workaround, using a placed block.

Created by: grevil
Created on: 7 Oct 2026 at 14:22 UTC
Last updated: 7 Oct 2026 at 16:11 UTC
Git tag 3.0.2
Security update
Unsupported

Other releases