Allow .po downloads from Drupal except in the configured translations directory

Created on 30 August 2012, almost 13 years ago
Updated 25 April 2025, about 1 month ago

Problem/Motivation

htaccess prevents po format from download, so we can't share PO files. There doesn't seem to be much reason for them to be protected.

Proposed resolution

See patches below.

Remaining tasks

Decide whether or not PO format should actually be protected or not.

Reasons to protect PO format:

  1. A po file name reveals module names and version numbers. This may be a security risk.
  2. po files of custom modules reveals custom functionality. This may be undesirable on sites where functionality is hidden from anonymous users. e.g. intranet.

Reasons not not protect:

  1. Out of the box Drupal can share its po files publicly.
πŸ“Œ Task
Status

Postponed: needs info

Version

11.0 πŸ”₯

Component

base system

Created by

πŸ‡­πŸ‡°Hong Kong droplet

Live updates comments and jobs are added and updated live.
  • D8MI

    (Drupal 8 Multilingual Initiative) is the tag used by the multilingual initiative to mark core issues (and some contributed module issues). For versions other than Drupal 8, use the i18n (Internationalization) tag on issues which involve or affect multilingual / multinational support. That is preferred over Translation.

  • stale-issue-cleanup

    To track issues in the developing policy for closing stale issues, [Policy, no patch] closing older issues

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • πŸ‡ΊπŸ‡ΈUnited States smustgrave

    Thank you for creating this issue to improve Drupal.

    We are working to decide if this task is still relevant to a currently supported version of Drupal. There hasn't been any discussion here for over 8 years which suggests that this has either been implemented or is no longer relevant. Your thoughts on this will allow a decision to be made.

    Since we need more information to move forward with this issue, the status is now Postponed (maintainer needs more info). If we don't receive additional information to help with the issue, it may be closed after three months.

    Thanks!

Production build 0.71.5 2024