Closed (fixed)
Project:
Name Field
Version:
8.x-1.x-dev
Component:
Code
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
22 Apr 2026 at 17:34 UTC
Updated:
7 May 2026 at 14:10 UTC
Jump to comment: Most recent
NameFormatter.php
Lines 232-232
$summary[] = $this->t('Format: <strong>Missing format.</strong><br/>This field will be displayed using the Default format.');
(Also lines 249 and 277.)
Impact: No XSS — strings are fully static — but Drupal discourages embedding HTML in translatable strings because translators can break the markup. A purely stylistic / coding-standards concern.
Pass the markup via a placeholder, e.g. '@missing' => new FormattableMarkup('Missing format.', []), or drop the inline HTML.
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #2
bluegeek9 commentedComment #5
bluegeek9 commented