Post installation

Hi All,

Is it possible to add a user defined field to the file entity?

With Drush:

I have installed a SSL certificate on the server and now my entire Drupal site runs at HTTPS. I needed this for Drupal Commerce, some payment methods require HTTPS in order to work.
However I need also certain pages (or paths) to run at HTTP.
How can I accomplish this please?

Hello,
Under D9 I used the Language-Dropdown module for my multilingual site (3 languages: German, English,Italian). I had the Language icons plus name horizontally next to each other on the top-right, using user-specified css. 
Now, under D10, my user css does not get applied, according to what I see when opening up development tools under my browser. The user css is EXACTLY the same for both versions. The lang_dropdown module is at version 8.x-2.1. This means that the 3 language icons/names get displayed vertically on the left-top of the page. I wonder what's wrong. 

Hello,

since 1 hour I'm working on an article with a Webform, but now a "Test" tab and a "View" tab appeared on the website and I don’t have an idea why.

"Test" tab message

"The below webform has been prepopulated with custom/random test data. When submitted, this information will still be saved and/or sent to designated recipients."

I was only building the Webform, not doing something in the settings...

The scenario is simple. I've constructed a Link object whose url points to an add form. I need a way to pass a return url to the add form so that proper redirection can happen after the add form is submitted

Using Url parameters

Passing a url (complete with route/parameters) doesn't work. For instance, the code

Url $add_url = Url::fromRoute(add_form_route, [], [

'query' => [

'return_url' => $return_url->toString()

My installation on 10.1.6 throws an error at me that says that I'm vulnerable or something to this security issue:

SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities
https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-...

But that CVE is only for v6 and v7. So I'm not sure what's broken in 10.1.6.