Mediaflow 2.x [#3536769]

Problem/Motivation

Upgrade and extend the Mediaflow contrib module on the Drupal 10/11 stack. Work covers (1) fixing the critical bugs that block media import/save, (2) replacing the exposed MFP key with a secure token flow and tightening CSP, and (3) exposing Mediaflow assets directly inside Media Library and Gutenberg so editors can pick images/videos without leaving the editor.

Remaining tasks

Scope

Scope of fixes – address the open issues on drupal.org (form reload #3504791, credential exposure #3504798, malformed entity #3504810, node-save exception #3504827) plus coding-standards cleanup #3516623.
Security – swap hard-coded key for token-based requests and whitelist Mediaflow domains in CSP (api.mediaflow.com, files.mediaflow.com, play.mediaflowpro.com, mfstatic.com, *.inviewer.se).
Compatibility – ensure clean install on Drupal 10.x and readiness for Drupal 11; add static testing.
Editor experience – register a Mediaflow browser in Media Library and a Gutenberg block that supports caption, alignment, and size controls.

Issue fork mediaflow-3536769

Show commands

Start within a Git clone of the project using the version control instructions.

Add & fetch this issue fork’s repository

Or, if you do not have SSH keys set up on git.drupalcode.org:

Add & fetch this issue fork’s repository

2.0.x changes, plain diff MR !6
Check out this branch for the first time

Check out existing branch, if you already have it locally
3504827-drupalcoreentityentitystorageexception-on-saving compare
Check out this branch for the first time

Check out existing branch, if you already have it locally
3537660-ensure-drupal-10-11 compare
Check out this branch for the first time

Check out existing branch, if you already have it locally
3516623-fix-phpcs-and-phpstan compare
Check out this branch for the first time

Check out existing branch, if you already have it locally
3537430-fix-mediaflow-ckeditor5 compare
Check out this branch for the first time

Check out existing branch, if you already have it locally
3504798-confidential-module-settings compare
Check out this branch for the first time

Check out existing branch, if you already have it locally
3537125-csp-policies compare
Check out this branch for the first time

Check out existing branch, if you already have it locally
3537100-fix-allowed-field compare
Check out this branch for the first time

Check out existing branch, if you already have it locally
3537078-entity-queries-must compare
Check out this branch for the first time

Check out existing branch, if you already have it locally
3503025-trying-to-access-array-offset-on-value-of-type-null compare
Check out this branch for the first time

Check out existing branch, if you already have it locally