- First commit to issue fork.
- @prudloff opened merge request.
- π«π·France prudloff Lille
I did a quick manual test and I think this is still a concern.
I rebased the patch.
I'm not sure the failing AssetAggregationAcrossPagesTest is related? - π§πͺBelgium borisson_ Mechelen, π§πͺ
I don't see why that test would start failing, and I can't find an issue about it having random failures. Since this a security hardening I think we should move this through.
- π³πΏNew Zealand quietone
This should have a title that has meaning that includes people who only know Drupal 8 and above. As is, the title, and thus the commit message, only makes sense for those that know what Drupal 7 did. Therefor, tagging for a title update.
- πΊπΈUnited States greggles Denver, Colorado, USA
Seems good to add the "why" - it's about extra security through defense in depth
- π§πͺBelgium borisson_ Mechelen, π§πͺ
Removing the tag, title looks great now.