A set of small pre-release fixes from the release audit. None changes behavior for a correctly configured site.

  • Escape the operator-authored message on an order constraint policy through Xss::filter() before it renders to the booker. Authoring a policy already requires a trusted, access-restricted permission, so this is defense in depth rather than an exposed hole.
  • Complete the French translation: 33 permission, menu, route and Views strings defined in YAML were missing from the .po, plus three absent header fields.
  • Refresh docs/architecture.md: the module map listed shipped modules as planned with pre-rename machine names, and the services table listed pre-rename service ids.
  • Minor code nits: type the calendar form's event dispatcher against the Symfony interface it calls; read entity-reference field items through typed accessors instead of magic properties; American spelling across comments, docblocks and docs; and drop "please" from two interface strings.

Issue fork yoyaku-3611592

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

mably created an issue. See original summary.

mably opened merge request !35

mably’s picture

mably commented
Status: Active » Needs review
mably’s picture

mably commented
Title: Escape custom policy messages, complete the French translation, and refresh pre-release docs and code nits » Escape custom policy messages, complete the French translation, refresh pre-release docs, and default the example to the plain mail channel

  • mably committed 8000a27b on 1.x 
    task: #3611592 Escape custom policy messages, complete the French...
mably’s picture

mably commented
Status: Needs review » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.