Updated: Comment #N
We need to get with the times and have our operation links use routes directly instead of path (href). This is definitely needed to be able to integrate CSRF tokens into the routing system.
Convert operation link items to use 'route_name' and 'route_parameters' instead of 'href' key. theme_links is used for dropbuttons so this is where it needs to be fixed.
Convert remaining operation links (entity list controller in another issue as this is a different complexity?), Modify theme_links to accept route_name and route_parameters etc.. See drupal_pre_render_link as this is currently doing what we need.
User interface changes
Links and operations can use route names directly.
PASSED: [[SimpleTest]]: [MySQL] 57,913 pass(es).
PASSED: [[SimpleTest]]: [MySQL] 59,741 pass(es).
PASSED: [[SimpleTest]]: [MySQL] 59,642 pass(es).
FAILED: [[SimpleTest]]: [MySQL] Unable to apply patch 2102777-68.patch. Unable to apply patch. See the log in the details link for more information.