Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
- User logout is vulnerable to CSRF updated 23 Apr 2024 at 13:37 UTC
- Bootstrap sets C locale, but does not set UTF-8 character encoding updated 23 Apr 2024 at 08:46 UTC
- Install profile is disabled for lots of different reasons and core doesn't allow for that updated 13 Apr 2024 at 15:04 UTC
- Make serializer customizable for Cache\DatabaseBackend updated 1 Mar 2024 at 04:09 UTC
- Remove install container definitions of FileSystem and StreamWrapperManager updated 13 Feb 2024 at 09:29 UTC
- Aggregator titles display quotes and other characters with HTML entity equivalents badly (write tests) updated 19 Dec 2023 at 18:49 UTC
- Fix test performance of Drupal\system\Tests\Menu\BreadcrumbTest updated 19 Dec 2023 at 10:34 UTC
- [Meta] PHP DOM (libxml2) misinterprets HTML5 updated 25 Nov 2023 at 00:04 UTC
- Restrict access to empty top level administration pages updated 7 Mar 2024 at 15:31 UTC
- Introduce .gitattributes to end the CRLF/LF and binary diff horror, and detect/auto-fix whitespace errors updated 19 Aug 2023 at 15:19 UTC
- Double click prevention on form submission updated 21 Jul 2023 at 20:13 UTC
- [Policy, no patch] Add special tag to identify issues ready for a high level only review updated 5 Jul 2023 at 00:39 UTC
- Verify peer on HTTPS if cURL available (but be careful of built-in cert bundles in the codebase) updated 26 May 2023 at 19:39 UTC
- Stampedes and cold cache performance issues with css/js aggregation updated 28 Apr 2023 at 09:44 UTC
- Deprecate the drupal.sh script updated 31 Dec 2022 at 01:04 UTC
- Fix test performance of Drupal\comment\Tests\CommentPreviewTest updated 29 Nov 2022 at 11:14 UTC
- DX: Insufficient error message "The form argument is not a valid form." updated 15 Nov 2022 at 17:04 UTC
- Multiple pagers on the same page updated 21 Sep 2022 at 09:09 UTC
- Add license information to aggregated assets updated 16 Nov 2022 at 07:30 UTC
- Add test to ensure fieldset allows any non-empty-string #title updated 3 Jul 2022 at 23:29 UTC
- Needs docs update: Move field type modules into separate "Field type" package updated 27 May 2022 at 12:24 UTC
- Ability to mark the form buttons to be of a specific type (so that they can be styled differently) updated 27 May 2022 at 12:14 UTC
- Fixed Kernel::init() overrides Drupal's error handling configuration updated 3 Apr 2022 at 23:39 UTC
- Convert tests using Standard profile to use Testing profile instead updated 3 Apr 2022 at 07:09 UTC
- Field module generates views data for entities without base table updated 31 Mar 2022 at 04:19 UTC
- [Policy, no patch] Clearly denote when @deprecated code is slated to be removed updated 6 Dec 2021 at 03:54 UTC
- [policy] Set a standard for @var inline variable type declarations updated 20 Oct 2022 at 13:47 UTC
- backport "$_COOKIE['has_js'] must die" patch to 7.x updated 24 Nov 2021 at 20:04 UTC
- With large number of permissions /admin/people/permissions becomes unusable updated 2 Sep 2022 at 06:31 UTC
- Machine name field throws notices if before source field. updated 1 Nov 2021 at 14:24 UTC
- Change the uid field from integer to serial by leveraging NO_AUTO_VALUE_ON_ZERO on MySQL updated 20 Aug 2021 at 12:14 UTC
- Add caching for configuration / rework config object loading (Was: Memory usage and i/o from config objects) updated 2 Aug 2021 at 08:49 UTC
- system_requirements should check for tokenizer extension updated 21 Jul 2021 at 14:44 UTC
- Login fails and no warning is issued if cookies are not enabled updated 22 Jan 2024 at 21:02 UTC
- drupal_rebuild() rebuilds container twice, since drupal_flush_all_caches() also rebuilds it updated 14 Jul 2021 at 14:22 UTC
- Inaccessible menu items in navigation links cause "Notice: Undefined index: localized_options" updated 11 Jun 2021 at 15:39 UTC
- Issues with "required, multiple" fields in forms updated 26 Jul 2021 at 15:26 UTC
- [D7] Remove dead code: progress.upload_callback, progress.error_callback updated 13 Apr 2021 at 10:14 UTC
- The PHPUnit Initiative is complete! updated 6 Jan 2021 at 12:44 UTC
- Overzealous locking in variable_initialize() updated 9 Dec 2020 at 15:24 UTC
- Form validation messages appear in incorrect order updated 21 Oct 2020 at 07:19 UTC
- SQLite Insert query does not account for INSERT FROM ... SELECT. updated 19 Oct 2020 at 10:27 UTC
- Clean-up remains of $form['array_filter'] hack with array_filter in book module updated 24 Sep 2020 at 11:04 UTC
- Allow themes to declare dependencies on modules updated 7 Apr 2020 at 19:19 UTC
- Adding new fields leads to a confusing "Field settings" form updated 20 Nov 2019 at 00:09 UTC
- Password reset form has no flood protection updated 18 Oct 2019 at 23:19 UTC
- [meta] Allow crediting reviewers (and other non-coders) as first-class contributors updated 26 Sep 2019 at 22:59 UTC
- Theme settings for main/secondary variables mismatch with menu settings updated 26 Jul 2019 at 19:29 UTC
- Remove the open_basedir requirement check updated 25 Jul 2019 at 22:54 UTC
- Not validated form values appear in $form_state updated 6 May 2019 at 13:49 UTC