Commanding Chaos for Coworking, Open Source and Creative Communities

Drupal core updates for December 3, 2014 | Drupal Groups

Mon, 12/15/2014 - 12:08 -- rprice

@alexpott premiered Config installer an install profile that takes over the Drupal installer and allows sites to be created from existing configuration. This opens the door for some interesting possibilities moving forward. We upgraded Drupal core to use Symfony 2.6 stable. Symfony 2.6 includes over 100 new features and enhancements. For full details see the release announcement. Following on from SA-CORE-2006 we removed mixed SSL support from core, focusing on security by default. We updated CKEditor library to 4.4.6, which included an important security fix. This also brought two new features, see the release announcement for more detail. We fixed a number of performance issues including Entity render cache is needlessly cleared when an Entity*Form*Display is modified, Convert all remaining attached individual CSS/JS assets to attached asset libraries and Themes should use libraries, not individual stylesheets and EntityRouteEnhancer and ContentFormControllerSubscriber implicitly depend on too many services. We are working to explain the configuration structures properly with configuration schemas. Recent big changes include all test views being validated and fixing user, system, link, etc. modules. There is still a long way to go, follow and join the efforts. We resolved a number of security issues including resolving the last missing default access for entity fields, the last one being taxonomy terms. We also made sure that twig debug output can't be used as an XSS vector.