core update to 9.3.4
This commit is contained in:
+1
-1
@@ -21,7 +21,7 @@
|
||||
"drupal/cer": "^4.0@alpha",
|
||||
"drupal/core-composer-scaffold": "^9.1",
|
||||
"drupal/core-project-message": "^9.1",
|
||||
"drupal/core-recommended": "^9.1",
|
||||
"drupal/core-recommended": "9.3.4",
|
||||
"drupal/graphql": "^4.0",
|
||||
"drupal/insert": "2.x-dev@dev",
|
||||
"drupal/paragraphs": "^1.12",
|
||||
|
||||
Generated
+631
-495
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1 @@
|
||||
/README.md
|
||||
@@ -11,10 +11,11 @@ parameters:
|
||||
# @default 100
|
||||
gc_divisor: 100
|
||||
#
|
||||
# Set session lifetime (in seconds), i.e. the time from the user's last
|
||||
# visit to the active session may be deleted by the session garbage
|
||||
# collector. When a session is deleted, authenticated users are logged out,
|
||||
# and the contents of the user's $_SESSION variable is discarded.
|
||||
# Set session lifetime (in seconds), i.e. the grace period for session
|
||||
# data. Sessions are deleted by the session garbage collector after one
|
||||
# session lifetime has elapsed since the user's last visit. When a session
|
||||
# is deleted, authenticated users are logged out, and the contents of the
|
||||
# user's session is discarded.
|
||||
# @default 200000
|
||||
gc_maxlifetime: 200000
|
||||
#
|
||||
@@ -36,6 +37,22 @@ parameters:
|
||||
# @default none
|
||||
# cookie_domain: '.example.com'
|
||||
#
|
||||
# Set the session ID string length. The length can be between 22 to 256. The
|
||||
# PHP recommended value is 48. See
|
||||
# https://www.php.net/manual/session.security.ini.php for more information.
|
||||
# This value should be kept in sync with
|
||||
# \Drupal\Core\Session\SessionConfiguration::__construct()
|
||||
# @default 48
|
||||
sid_length: 48
|
||||
#
|
||||
# Set the number of bits in encoded session ID character. The possible
|
||||
# values are '4' (0-9, a-f), '5' (0-9, a-v), and '6' (0-9, a-z, A-Z, "-",
|
||||
# ","). The PHP recommended value is 6. See
|
||||
# https://www.php.net/manual/session.security.ini.php for more information.
|
||||
# This value should be kept in sync with
|
||||
# \Drupal\Core\Session\SessionConfiguration::__construct()
|
||||
# @default 6
|
||||
sid_bits_per_character: 6
|
||||
twig.config:
|
||||
# Twig debugging:
|
||||
#
|
||||
@@ -153,10 +170,10 @@ parameters:
|
||||
- webcal
|
||||
- rtsp
|
||||
|
||||
# Configure Cross-Site HTTP requests (CORS).
|
||||
# Read https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS
|
||||
# for more information about the topic in general.
|
||||
# Note: By default the configuration is disabled.
|
||||
# Configure Cross-Site HTTP requests (CORS).
|
||||
# Read https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS
|
||||
# for more information about the topic in general.
|
||||
# Note: By default the configuration is disabled.
|
||||
cors.config:
|
||||
enabled: false
|
||||
# Specify allowed headers, like 'x-allowed-header'.
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
<?php
|
||||
|
||||
// @codingStandardsIgnoreFile
|
||||
// phpcs:ignoreFile
|
||||
|
||||
/**
|
||||
* @file
|
||||
@@ -138,50 +138,17 @@ $databases = [];
|
||||
* request as needed. The fourth line creates a new database with a name of
|
||||
* "extra".
|
||||
*
|
||||
* You can optionally set prefixes for some or all database table names
|
||||
* by using the 'prefix' setting. If a prefix is specified, the table
|
||||
* name will be prepended with its value. Be sure to use valid database
|
||||
* characters only, usually alphanumeric and underscore. If no prefixes
|
||||
* are desired, leave it as an empty string ''.
|
||||
* You can optionally set a prefix for all database table names by using the
|
||||
* 'prefix' setting. If a prefix is specified, the table name will be prepended
|
||||
* with its value. Be sure to use valid database characters only, usually
|
||||
* alphanumeric and underscore. If no prefix is desired, do not set the 'prefix'
|
||||
* key or set its value to an empty string ''.
|
||||
*
|
||||
* To have all database names prefixed, set 'prefix' as a string:
|
||||
* For example, to have all database table prefixed with 'main_', set:
|
||||
* @code
|
||||
* 'prefix' => 'main_',
|
||||
* @endcode
|
||||
*
|
||||
* Per-table prefixes are deprecated as of Drupal 8.2, and will be removed in
|
||||
* Drupal 9.0. After that, only a single prefix for all tables will be
|
||||
* supported.
|
||||
*
|
||||
* To provide prefixes for specific tables, set 'prefix' as an array.
|
||||
* The array's keys are the table names and the values are the prefixes.
|
||||
* The 'default' element is mandatory and holds the prefix for any tables
|
||||
* not specified elsewhere in the array. Example:
|
||||
* @code
|
||||
* 'prefix' => [
|
||||
* 'default' => 'main_',
|
||||
* 'users' => 'shared_',
|
||||
* 'sessions' => 'shared_',
|
||||
* 'role' => 'shared_',
|
||||
* 'authmap' => 'shared_',
|
||||
* ],
|
||||
* @endcode
|
||||
* You can also use a reference to a schema/database as a prefix. This may be
|
||||
* useful if your Drupal installation exists in a schema that is not the default
|
||||
* or you want to access several databases from the same code base at the same
|
||||
* time.
|
||||
* Example:
|
||||
* @code
|
||||
* 'prefix' => [
|
||||
* 'default' => 'main.',
|
||||
* 'users' => 'shared.',
|
||||
* 'sessions' => 'shared.',
|
||||
* 'role' => 'shared.',
|
||||
* 'authmap' => 'shared.',
|
||||
* ];
|
||||
* @endcode
|
||||
* NOTE: MySQL and SQLite's definition of a schema is a database.
|
||||
*
|
||||
* Advanced users can add or override initial commands to execute when
|
||||
* connecting to the database server, as well as PDO connection settings. For
|
||||
* example, to enable MySQL SELECT queries to exceed the max_join_size system
|
||||
@@ -308,16 +275,18 @@ $settings['hash_salt'] = '';
|
||||
$settings['update_free_access'] = FALSE;
|
||||
|
||||
/**
|
||||
* Fallback to HTTP for Update Manager.
|
||||
* Fallback to HTTP for Update Manager and for fetching security advisories.
|
||||
*
|
||||
* If your Drupal site fails to connect to updates.drupal.org using HTTPS to
|
||||
* fetch Drupal core, module and theme update status, you may uncomment this
|
||||
* setting and set it to TRUE to allow an insecure fallback to HTTP. Note that
|
||||
* doing so will open your site up to a potential man-in-the-middle attack. You
|
||||
* should instead attempt to resolve the issues before enabling this option.
|
||||
* If your site fails to connect to updates.drupal.org over HTTPS (either when
|
||||
* fetching data on available updates, or when fetching the feed of critical
|
||||
* security announcements), you may uncomment this setting and set it to TRUE to
|
||||
* allow an insecure fallback to HTTP. Note that doing so will open your site up
|
||||
* to a potential man-in-the-middle attack. You should instead attempt to
|
||||
* resolve the issues before enabling this option.
|
||||
* @see https://www.drupal.org/docs/system-requirements/php-requirements#openssl
|
||||
* @see https://en.wikipedia.org/wiki/Man-in-the-middle_attack
|
||||
* @see \Drupal\update\UpdateFetcher
|
||||
* @see \Drupal\system\SecurityAdvisories\SecurityAdvisoriesFetcher
|
||||
*/
|
||||
# $settings['update_fetch_with_http_fallback'] = TRUE;
|
||||
|
||||
@@ -385,17 +354,20 @@ $settings['update_free_access'] = FALSE;
|
||||
* Sets which headers to trust from your reverse proxy.
|
||||
*
|
||||
* Common values are:
|
||||
* - \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_ALL
|
||||
* - \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_FOR
|
||||
* - \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_HOST
|
||||
* - \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_PORT
|
||||
* - \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_PROTO
|
||||
* - \Symfony\Component\HttpFoundation\Request::HEADER_FORWARDED
|
||||
*
|
||||
* Note the default value of
|
||||
* @code
|
||||
* \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_ALL | \Symfony\Component\HttpFoundation\Request::HEADER_FORWARDED
|
||||
* \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_FOR | \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_HOST | \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_PORT | \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_PROTO | \Symfony\Component\HttpFoundation\Request::HEADER_FORWARDED
|
||||
* @endcode
|
||||
* is not secure by default. The value should be set to only the specific
|
||||
* headers the reverse proxy uses. For example:
|
||||
* @code
|
||||
* \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_ALL
|
||||
* \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_FOR | \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_HOST | \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_PORT | \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_PROTO
|
||||
* @endcode
|
||||
* This would trust the following headers:
|
||||
* - X_FORWARDED_FOR
|
||||
@@ -403,11 +375,14 @@ $settings['update_free_access'] = FALSE;
|
||||
* - X_FORWARDED_PROTO
|
||||
* - X_FORWARDED_PORT
|
||||
*
|
||||
* @see \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_ALL
|
||||
* @see \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_FOR
|
||||
* @see \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_HOST
|
||||
* @see \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_PORT
|
||||
* @see \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_PROTO
|
||||
* @see \Symfony\Component\HttpFoundation\Request::HEADER_FORWARDED
|
||||
* @see \Symfony\Component\HttpFoundation\Request::setTrustedProxies
|
||||
*/
|
||||
# $settings['reverse_proxy_trusted_headers'] = \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_ALL | \Symfony\Component\HttpFoundation\Request::HEADER_FORWARDED;
|
||||
# $settings['reverse_proxy_trusted_headers'] = \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_FOR | \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_HOST | \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_PORT | \Symfony\Component\HttpFoundation\Request::HEADER_X_FORWARDED_PROTO | \Symfony\Component\HttpFoundation\Request::HEADER_FORWARDED;
|
||||
|
||||
|
||||
/**
|
||||
@@ -603,6 +578,21 @@ $settings['update_free_access'] = FALSE;
|
||||
# ini_set('pcre.backtrack_limit', 200000);
|
||||
# ini_set('pcre.recursion_limit', 200000);
|
||||
|
||||
/**
|
||||
* Add Permissions-Policy header to disable Google FLoC.
|
||||
*
|
||||
* By default, Drupal sends the 'Permissions-Policy: interest-cohort=()' header
|
||||
* to disable Google's Federated Learning of Cohorts feature, introduced in
|
||||
* Chrome 89.
|
||||
*
|
||||
* See https://en.wikipedia.org/wiki/Federated_Learning_of_Cohorts for more
|
||||
* information about FLoC.
|
||||
*
|
||||
* If you don't wish to disable FLoC in Chrome, you can set this value
|
||||
* to FALSE.
|
||||
*/
|
||||
# $settings['block_interest_cohort'] = TRUE;
|
||||
|
||||
/**
|
||||
* Configuration overrides.
|
||||
*
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
<?php
|
||||
|
||||
// @codingStandardsIgnoreFile
|
||||
// phpcs:ignoreFile
|
||||
|
||||
/**
|
||||
* @file
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
<?php
|
||||
|
||||
// @codingStandardsIgnoreFile
|
||||
// phpcs:ignoreFile
|
||||
|
||||
/**
|
||||
* @file
|
||||
|
||||
@@ -33,18 +33,6 @@
|
||||
<add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
|
||||
</conditions>
|
||||
</rule>
|
||||
<!-- If running on a PHP version affected by httpoxy vulnerability
|
||||
uncomment the following rule to mitigate it's impact. To make this
|
||||
rule work, you will also need to add HTTP_PROXY to the allowed server
|
||||
variables manually in IIS. See https://www.drupal.org/node/2783079.
|
||||
<rule name="Erase HTTP_PROXY" patternSyntax="Wildcard">
|
||||
<match url="*.*" />
|
||||
<serverVariables>
|
||||
<set name="HTTP_PROXY" value="" />
|
||||
</serverVariables>
|
||||
<action type="None" />
|
||||
</rule>
|
||||
-->
|
||||
<!-- To redirect all users to access the site WITH the 'www.' prefix,
|
||||
http://example.com/foo will be redirected to http://www.example.com/foo)
|
||||
adapt and uncomment the following: -->
|
||||
|
||||
Reference in New Issue
Block a user