Needs review
Project:
Drupal core
Version:
main
Component:
user.module
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
22 Jun 2026 at 21:20 UTC
Updated:
22 Jun 2026 at 21:26 UTC
Jump to comment: Most recent
With #144538: User logout is vulnerable to CSRF the route user.logout.confirm was introduced, but without a _title default value. In fact that this is a route to a form we should add a default _title.
Furthermore I was fixing my tests in #3605475: ETrackerFunctionalTests are not working and because of the logic in Drupal\Tests\UiHelperTrait::drupalLogout() the test gets the user.logout.confirm route/page in the session and the title_resolver service can't get a title from the route.
Add _title to user.logout.confirm
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #3
sunlix