Problem/Motivation

In the BigPipe D8.1 core issue, @effulgentsia said this at #2469431-258: BigPipe for auth users: first send+render the cheap parts of the page, then the expensive parts.10:

So here we have a strategy that outputs the placeholder to the client. As opposed to previously in HEAD, where placeholder markup was assumed to only live on the server, such as within render cache entries. It seems not ideal to me for someone on a production site, with no special permissions, to be able to "view source" and see the PHP callback and arguments of the lazy builder, or potentially similar server-side-specific information that might be in $original_placeholder.

Proposed resolution

TBD

Remaining tasks

TBD

User interface changes

None.

API changes

TBD

Data model changes

TBD

Comments

Wim Leers created an issue. See original summary.

wim leers’s picture

Project: BigPipe » Drupal core
Version: 8.x-1.x-dev » 8.1.x-dev
Component: Code » big_pipe.module

Version: 8.1.x-dev » 8.2.x-dev

Drupal 8.1.0-beta1 was released on March 2, 2016, which means new developments and disruptive changes should now be targeted against the 8.2.x-dev branch. For more information see the Drupal 8 minor version schedule and the Allowed changes during the Drupal 8 release cycle.

wim leers’s picture

Version: 8.2.x-dev » 8.1.x-dev
wim leers’s picture

Status: Active » Needs review
StatusFileSize
new1.89 KB

Triaged by @Fabianx and I at DrupalCon New Orleans.

We +1'd.

Pseudocode attached.

Status: Needs review » Needs work

The last submitted patch, 5: 2678658-5.patch, failed testing.

wim leers’s picture

Status: Needs work » Needs review
Related issues: +#2667190: Create a single "debug output" setting, +#2381797: Add render_cache debug output
StatusFileSize
new9.94 KB
new9.2 KB

Here's a step forward. This injects the renderer.config instead of talking to the container. That required making some class methods instance methods.

This also adds a debug key to the renderer.config container parameter. We'll also need that in #2667190: Create a single "debug output" setting and #2381797: Add render_cache debug output.

This still won't pass all tests, but will at least pass the unit test.

Status: Needs review » Needs work

The last submitted patch, 7: 2678658-7.patch, failed testing.

wim leers’s picture

Assigned: Unassigned » effulgentsia
Status: Needs work » Needs review

This is blocked on review from @effulgentsia.

wim leers’s picture

IMO this is minor at most. Could easily happen in 8.2 or 8.3. Not necessary to make BigPipe stable.

wim leers’s picture

Priority: Normal » Minor

Version: 8.1.x-dev » 8.2.x-dev

Drupal 8.1.9 was released on September 7 and is the final bugfix release for the Drupal 8.1.x series. Drupal 8.1.x will not receive any further development aside from security fixes. Drupal 8.2.0-rc1 is now available and sites should prepare to upgrade to 8.2.0.

Bug reports should be targeted against the 8.2.x-dev branch from now on, and new development or disruptive changes should be targeted against the 8.3.x-dev branch. For more information see the Drupal 8 minor version schedule and the Allowed changes during the Drupal 8 release cycle.

Version: 8.2.x-dev » 8.3.x-dev

Drupal 8.2.6 was released on February 1, 2017 and is the final full bugfix release for the Drupal 8.2.x series. Drupal 8.2.x will not receive any further development aside from critical and security fixes. Sites should prepare to update to 8.3.0 on April 5, 2017. (Drupal 8.3.0-alpha1 is available for testing.)

Bug reports should be targeted against the 8.3.x-dev branch from now on, and new development or disruptive changes should be targeted against the 8.4.x-dev branch. For more information see the Drupal 8 minor version schedule and the Allowed changes during the Drupal 8 release cycle.

wim leers’s picture

Status: Needs review » Closed (works as designed)

This went two cycles (see comments #12 + #13) without a single comment. It's really been blocked on feedback since May 2016, which is almost 9 months ago.

If in 9 months nobody felt like reviewing this or even saying "yes please do this", I think it's fair to say this is not actually important. And to be perfectly clear: there's no way that metadata can be modified to retrieve different information.