Make form tokens more unique when form IDs are shared

Created on 15 March 2012, over 12 years ago
Updated 26 June 2023, about 1 year ago

There are some cases where we're sharing the same form IDs across multiple forms in core. For example, any entity form, like node/1/edit and node/2/edit (assuming both nodes are the same type), the $form['#token'] for both is 'article_node_form'. We should probably make this form token use 'node_[node:nid]_form' instead.

πŸ“Œ Task
Status

Postponed: needs info

Version

9.5

Component
FormΒ  β†’

Last updated less than a minute ago

Created by

πŸ‡ΊπŸ‡ΈUnited States Dave Reid Nebraska πŸ‡ΊπŸ‡Έ

Live updates comments and jobs are added and updated live.
  • Security improvements

    It makes Drupal less vulnerable to abuse or misuse. Note, this is the preferred tag, though the Security tag has a large body of issues tagged to it. Do NOT publicly disclose security vulnerabilities; contact the security team instead. Anyone (whether security team or not) can apply this tag to security improvements that do not directly present a vulnerability e.g. hardening an API to add filtering to reduce a common mistake in contributed modules.

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024