Contrib.social

Make form tokens more unique when form IDs are shared

Open on Drupal.org →
Created on 15 March 2012, about 13 years ago
Updated 26 June 2023, almost 2 years ago

There are some cases where we're sharing the same form IDs across multiple forms in core. For example, any entity form, like node/1/edit and node/2/edit (assuming both nodes are the same type), the $form['#token'] for both is 'article_node_form'. We should probably make this form token use 'node_[node:nid]_form' instead.

📌 Task
Status

Postponed: needs info

Version

9.5

Component
Form  →

Last updated about 7 hours ago

Created by

🇺🇸United States dave reid Nebraska USA

Live updates comments and jobs are added and updated live.
  • Security improvements

    It makes Drupal less vulnerable to abuse or misuse. Note, this is the preferred tag, though the Security tag has a large body of issues tagged to it. Do NOT publicly disclose security vulnerabilities; contact the security team instead. Anyone (whether security team or not) can apply this tag to security improvements that do not directly present a vulnerability e.g. hardening an API to add filtering to reduce a common mistake in contributed modules.

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • Comment almost 2 years ago →
    🇺🇸United States smustgrave

    Currently going through the end of the queue to see what could still be relevant for D10.

    Wonder if this is still a needed task?

  • Status changed to Closed: outdated about 1 month ago
  • Comment about 1 month ago →
    🇳🇿New Zealand quietone

    There has been no work on this task for 13 years. It is likely that it is no longer needed or has been implemented. Therefor, closing.

    If there is work to do here, then either re-open the issue and add a comment or open a new issue and reference this one.

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024