Early Bird Registration for DrupalCon Portland 2024 is open! Register by 23:59 PST on 31 March 2024, to get $100 off your ticket.
By larowlan on
Change record status:
Published (View all published change records)
Project:
Introduced in branch:
9.3.x
Introduced in version:
9.3.0
Description:
In #2966327: Limit what can be called by a callback in render arrays to reduce the risk of RCE we deprecated using arbitrary callables for render-array callbacks and this was removed in Drupal 9.
This didn't convert #date_time_callbacks and #date_date_callbacks which are special render-array callbacks supported by the DateTime and DateList render elements.
These too now must comply with the TrustedCallbackInterface
See https://www.drupal.org/node/2966725 for details on how to make that conversion
Impacts:
Site builders, administrators, editors
Module developers