updated core to 9.5.9
This commit is contained in:
parent
f562d9c580
commit
02fc5f228c
|
|
@ -19,24 +19,24 @@
|
|||
*.config text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.css text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.dist text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.engine text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php
|
||||
*.engine text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php linguist-language=php
|
||||
*.html text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=html
|
||||
*.inc text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php
|
||||
*.install text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php
|
||||
*.inc text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php linguist-language=php
|
||||
*.install text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php linguist-language=php
|
||||
*.js text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.json text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.lock text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.map text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.md text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.module text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php
|
||||
*.php text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php
|
||||
*.module text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php linguist-language=php
|
||||
*.php text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php linguist-language=php
|
||||
*.po text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.profile text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php
|
||||
*.profile text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php linguist-language=php
|
||||
*.script text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.sh text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php
|
||||
*.sh text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php linguist-language=php
|
||||
*.sql text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.svg text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.theme text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php
|
||||
*.theme text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2 diff=php linguist-language=php
|
||||
*.twig text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.txt text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
*.xml text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
|
||||
|
|
|
|||
|
|
@ -92,9 +92,9 @@
|
|||
"drupal/console": "^1.0.2",
|
||||
"drupal/consumer_image_styles": "^4.0",
|
||||
"drupal/content_sync": "^2.x-dev@dev",
|
||||
"drupal/core-composer-scaffold": "9.4.8",
|
||||
"drupal/core-project-message": "9.4.8",
|
||||
"drupal/core-recommended": "9.4.8",
|
||||
"drupal/core-composer-scaffold": "9.5.9",
|
||||
"drupal/core-project-message": "9.5.9",
|
||||
"drupal/core-recommended": "9.5.9",
|
||||
"drupal/ctools": "^3.6",
|
||||
"drupal/debug_bar": "^1.4",
|
||||
"drupal/devel": "^4.1",
|
||||
|
|
|
|||
File diff suppressed because it is too large
Load Diff
|
|
@ -24,6 +24,12 @@
|
|||
* @see http://php.net/manual/en/features.commandline.webserver.php
|
||||
*/
|
||||
|
||||
if (PHP_SAPI !== 'cli-server') {
|
||||
// Bail out if this is not PHP's Development Server.
|
||||
header($_SERVER['SERVER_PROTOCOL'] . ' 403 Forbidden');
|
||||
exit;
|
||||
}
|
||||
|
||||
$url = parse_url($_SERVER['REQUEST_URI']);
|
||||
if (file_exists(__DIR__ . $url['path'])) {
|
||||
// Serve the requested resource as-is.
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@
|
|||
#
|
||||
|
||||
# Protect files and directories from prying eyes.
|
||||
<FilesMatch "\.(engine|inc|install|make|module|profile|po|sh|.*sql|theme|twig|tpl(\.php)?|xtmpl|yml)(~|\.sw[op]|\.bak|\.orig|\.save)?$|^(\.(?!well-known).*|Entries.*|Repository|Root|Tag|Template|composer\.(json|lock)|web\.config)$|^#.*#$|\.php(~|\.sw[op]|\.bak|\.orig|\.save)$">
|
||||
<FilesMatch "\.(engine|inc|install|make|module|profile|po|sh|.*sql|theme|twig|tpl(\.php)?|xtmpl|yml)(~|\.sw[op]|\.bak|\.orig|\.save)?$|^(\.(?!well-known).*|Entries.*|Repository|Root|Tag|Template|composer\.(json|lock)|web\.config|yarn\.lock|package\.json)$|^#.*#$|\.php(~|\.sw[op]|\.bak|\.orig|\.save)$">
|
||||
<IfModule mod_authz_core.c>
|
||||
Require all denied
|
||||
</IfModule>
|
||||
|
|
@ -42,7 +42,7 @@ AddEncoding gzip svgz
|
|||
# Enable expirations.
|
||||
ExpiresActive On
|
||||
|
||||
# Cache all files for 2 weeks after access (A).
|
||||
# Cache all files and redirects for 2 weeks after access (A).
|
||||
ExpiresDefault A1209600
|
||||
|
||||
<FilesMatch \.php$>
|
||||
|
|
@ -158,12 +158,12 @@ AddEncoding gzip svgz
|
|||
# Serve gzip compressed CSS files if they exist and the client accepts gzip.
|
||||
RewriteCond %{HTTP:Accept-encoding} gzip
|
||||
RewriteCond %{REQUEST_FILENAME}\.gz -s
|
||||
RewriteRule ^(.*)\.css $1\.css\.gz [QSA]
|
||||
RewriteRule ^(.*css_[a-zA-Z0-9-_]+)\.css$ $1\.css\.gz [QSA]
|
||||
|
||||
# Serve gzip compressed JS files if they exist and the client accepts gzip.
|
||||
RewriteCond %{HTTP:Accept-encoding} gzip
|
||||
RewriteCond %{REQUEST_FILENAME}\.gz -s
|
||||
RewriteRule ^(.*)\.js $1\.js\.gz [QSA]
|
||||
RewriteRule ^(.*js_[a-zA-Z0-9-_]+)\.js$ $1\.js\.gz [QSA]
|
||||
|
||||
# Serve correct content types, and prevent double compression.
|
||||
RewriteRule \.css\.gz$ - [T=text/css,E=no-gzip:1,E=no-brotli:1]
|
||||
|
|
|
|||
|
|
@ -49,6 +49,8 @@ Disallow: /user/register
|
|||
Disallow: /user/password
|
||||
Disallow: /user/login
|
||||
Disallow: /user/logout
|
||||
Disallow: /media/oembed
|
||||
Disallow: /*/media/oembed
|
||||
# Paths (no clean URLs)
|
||||
Disallow: /index.php/admin/
|
||||
Disallow: /index.php/comment/reply/
|
||||
|
|
@ -59,3 +61,5 @@ Disallow: /index.php/user/password
|
|||
Disallow: /index.php/user/register
|
||||
Disallow: /index.php/user/login
|
||||
Disallow: /index.php/user/logout
|
||||
Disallow: /index.php/media/oembed
|
||||
Disallow: /index.php/*/media/oembed
|
||||
|
|
|
|||
|
|
@ -147,6 +147,14 @@ parameters:
|
|||
#
|
||||
# @default []
|
||||
tags: []
|
||||
# Renderer cache debug:
|
||||
#
|
||||
# Allows cache debugging output for each rendered element.
|
||||
#
|
||||
# Enabling render cache debugging is not recommended in production
|
||||
# environments.
|
||||
# @default false
|
||||
debug: false
|
||||
# Cacheability debugging:
|
||||
#
|
||||
# Responses with cacheability metadata (CacheableResponseInterface instances)
|
||||
|
|
@ -161,15 +169,15 @@ parameters:
|
|||
# @default false
|
||||
http.response.debug_cacheability_headers: false
|
||||
factory.keyvalue: {}
|
||||
# Default key/value storage service to use.
|
||||
# @default keyvalue.database
|
||||
# default: keyvalue.database
|
||||
# Collection-specific overrides.
|
||||
# state: keyvalue.database
|
||||
# Default key/value storage service to use.
|
||||
# @default keyvalue.database
|
||||
# default: keyvalue.database
|
||||
# Collection-specific overrides.
|
||||
# state: keyvalue.database
|
||||
factory.keyvalue.expirable: {}
|
||||
# Default key/value expirable storage service to use.
|
||||
# @default keyvalue.database.expirable
|
||||
# default: keyvalue.database.expirable
|
||||
# Default key/value expirable storage service to use.
|
||||
# @default keyvalue.database.expirable
|
||||
# default: keyvalue.database.expirable
|
||||
# Allowed protocols for URL generation.
|
||||
filter_protocols:
|
||||
- http
|
||||
|
|
@ -196,7 +204,8 @@ parameters:
|
|||
allowedHeaders: []
|
||||
# Specify allowed request methods, specify ['*'] to allow all possible ones.
|
||||
allowedMethods: []
|
||||
# Configure requests allowed from specific origins.
|
||||
# Configure requests allowed from specific origins. Do not include trailing
|
||||
# slashes with URLs.
|
||||
allowedOrigins: ['*']
|
||||
# Sets the Access-Control-Expose-Headers header.
|
||||
exposedHeaders: false
|
||||
|
|
|
|||
|
|
@ -138,6 +138,21 @@ $databases = [];
|
|||
* request as needed. The fourth line creates a new database with a name of
|
||||
* "extra".
|
||||
*
|
||||
* For MySQL, MariaDB or equivalent databases the 'isolation_level' option can
|
||||
* be set. The recommended transaction isolation level for Drupal sites is
|
||||
* 'READ COMMITTED'. The 'REPEATABLE READ' option is supported but can result
|
||||
* in deadlocks, the other two options are 'READ UNCOMMITTED' and 'SERIALIZABLE'.
|
||||
* They are available but not supported; use them at your own risk. For more
|
||||
* info:
|
||||
* https://dev.mysql.com/doc/refman/5.7/en/innodb-transaction-isolation-levels.html
|
||||
*
|
||||
* On your settings.php, change the isolation level:
|
||||
* @code
|
||||
* $databases['default']['default']['init_commands'] = [
|
||||
* 'isolation_level' => 'SET SESSION TRANSACTION ISOLATION LEVEL READ COMMITTED',
|
||||
* ];
|
||||
* @endcode
|
||||
*
|
||||
* You can optionally set a prefix for all database table names by using the
|
||||
* 'prefix' setting. If a prefix is specified, the table name will be prepended
|
||||
* with its value. Be sure to use valid database characters only, usually
|
||||
|
|
@ -343,10 +358,13 @@ $settings['update_free_access'] = FALSE;
|
|||
# $settings['reverse_proxy'] = TRUE;
|
||||
|
||||
/**
|
||||
* Specify every reverse proxy IP address in your environment.
|
||||
* This setting is required if $settings['reverse_proxy'] is TRUE.
|
||||
* Reverse proxy addresses.
|
||||
*
|
||||
* Specify every reverse proxy IP address in your environment, as an array of
|
||||
* IPv4/IPv6 addresses or subnets in CIDR notation. This setting is required if
|
||||
* $settings['reverse_proxy'] is TRUE.
|
||||
*/
|
||||
# $settings['reverse_proxy_addresses'] = ['a.b.c.d', ...];
|
||||
# $settings['reverse_proxy_addresses'] = ['a.b.c.d', 'e.f.g.h/24', ...];
|
||||
|
||||
/**
|
||||
* Reverse proxy trusted headers.
|
||||
|
|
@ -513,6 +531,25 @@ $settings['update_free_access'] = FALSE;
|
|||
*/
|
||||
# $settings['file_additional_public_schemes'] = ['example'];
|
||||
|
||||
/**
|
||||
* File schemes whose paths should not be normalized:
|
||||
*
|
||||
* Normally, Drupal normalizes '/./' and '/../' segments in file URIs in order
|
||||
* to prevent unintended file access. For example, 'private://css/../image.png'
|
||||
* is normalized to 'private://image.png' before checking access to the file.
|
||||
*
|
||||
* On Windows, Drupal also replaces '\' with '/' in URIs for the local
|
||||
* filesystem.
|
||||
*
|
||||
* If file URIs with one or more scheme should not be normalized like this, then
|
||||
* list the schemes here. For example, if 'porcelain://china/./plate.png' should
|
||||
* not be normalized to 'porcelain://china/plate.png', then add 'porcelain' to
|
||||
* this array. In this case, make sure that the module providing the 'porcelain'
|
||||
* scheme does not allow unintended file access when using '/../' to move up the
|
||||
* directory tree.
|
||||
*/
|
||||
# $settings['file_sa_core_2023_005_schemes'] = ['porcelain'];
|
||||
|
||||
/**
|
||||
* Private file path:
|
||||
*
|
||||
|
|
@ -576,7 +613,7 @@ $settings['update_free_access'] = FALSE;
|
|||
*
|
||||
* Note: This setting does not apply to installation and update pages.
|
||||
*/
|
||||
# $settings['maintenance_theme'] = 'bartik';
|
||||
# $settings['maintenance_theme'] = 'claro';
|
||||
|
||||
/**
|
||||
* PHP settings:
|
||||
|
|
@ -601,21 +638,6 @@ $settings['update_free_access'] = FALSE;
|
|||
# ini_set('pcre.backtrack_limit', 200000);
|
||||
# ini_set('pcre.recursion_limit', 200000);
|
||||
|
||||
/**
|
||||
* Add Permissions-Policy header to disable Google FLoC.
|
||||
*
|
||||
* By default, Drupal sends the 'Permissions-Policy: interest-cohort=()' header
|
||||
* to disable Google's Federated Learning of Cohorts feature, introduced in
|
||||
* Chrome 89.
|
||||
*
|
||||
* See https://en.wikipedia.org/wiki/Federated_Learning_of_Cohorts for more
|
||||
* information about FLoC.
|
||||
*
|
||||
* If you don't wish to disable FLoC in Chrome, you can set this value
|
||||
* to FALSE.
|
||||
*/
|
||||
# $settings['block_interest_cohort'] = TRUE;
|
||||
|
||||
/**
|
||||
* Configuration overrides.
|
||||
*
|
||||
|
|
@ -641,33 +663,6 @@ $settings['update_free_access'] = FALSE;
|
|||
# $config['system.site']['name'] = 'My Drupal site';
|
||||
# $config['user.settings']['anonymous'] = 'Visitor';
|
||||
|
||||
/**
|
||||
* Fast 404 pages:
|
||||
*
|
||||
* Drupal can generate fully themed 404 pages. However, some of these responses
|
||||
* are for images or other resource files that are not displayed to the user.
|
||||
* This can waste bandwidth, and also generate server load.
|
||||
*
|
||||
* The options below return a simple, fast 404 page for URLs matching a
|
||||
* specific pattern:
|
||||
* - $config['system.performance']['fast_404']['exclude_paths']: A regular
|
||||
* expression to match paths to exclude, such as images generated by image
|
||||
* styles, or dynamically-resized images. The default pattern provided below
|
||||
* also excludes the private file system. If you need to add more paths, you
|
||||
* can add '|path' to the expression.
|
||||
* - $config['system.performance']['fast_404']['paths']: A regular expression to
|
||||
* match paths that should return a simple 404 page, rather than the fully
|
||||
* themed 404 page. If you don't have any aliases ending in htm or html you
|
||||
* can add '|s?html?' to the expression.
|
||||
* - $config['system.performance']['fast_404']['html']: The html to return for
|
||||
* simple 404 pages.
|
||||
*
|
||||
* Remove the leading hash signs if you would like to alter this functionality.
|
||||
*/
|
||||
# $config['system.performance']['fast_404']['exclude_paths'] = '/\/(?:styles)|(?:system\/files)\//';
|
||||
# $config['system.performance']['fast_404']['paths'] = '/\.(?:txt|png|gif|jpe?g|css|js|ico|swf|flv|cgi|bat|pl|dll|exe|asp)$/i';
|
||||
# $config['system.performance']['fast_404']['html'] = '<!DOCTYPE html><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL "@path" was not found on this server.</p></body></html>';
|
||||
|
||||
/**
|
||||
* Load services definition file.
|
||||
*/
|
||||
|
|
@ -777,6 +772,49 @@ $settings['entity_update_backup'] = TRUE;
|
|||
*/
|
||||
$settings['migrate_node_migrate_type_classic'] = FALSE;
|
||||
|
||||
/**
|
||||
* The default settings for migration sources.
|
||||
*
|
||||
* These settings are used as the default settings on the Credential form at
|
||||
* /upgrade/credentials.
|
||||
*
|
||||
* - migrate_source_version - The version of the source database. This can be
|
||||
* '6' or '7'. Defaults to '7'.
|
||||
* - migrate_source_connection - The key in the $databases array for the source
|
||||
* site.
|
||||
* - migrate_file_public_path - The location of the source Drupal 6 or Drupal 7
|
||||
* public files. This can be a local file directory containing the source
|
||||
* Drupal 6 or Drupal 7 site (e.g /var/www/docroot), or the site address
|
||||
* (e.g http://example.com).
|
||||
* - migrate_file_private_path - The location of the source Drupal 7 private
|
||||
* files. This can be a local file directory containing the source Drupal 7
|
||||
* site (e.g /var/www/docroot), or empty to use the same value as Public
|
||||
* files directory.
|
||||
*
|
||||
* Sample configuration for a drupal 6 source site with the source files in a
|
||||
* local directory.
|
||||
*
|
||||
* @code
|
||||
* $settings['migrate_source_version'] = '6';
|
||||
* $settings['migrate_source_connection'] = 'migrate';
|
||||
* $settings['migrate_file_public_path'] = '/var/www/drupal6';
|
||||
* @endcode
|
||||
*
|
||||
* Sample configuration for a drupal 7 source site with public source files on
|
||||
* the source site and the private files in a local directory.
|
||||
*
|
||||
* @code
|
||||
* $settings['migrate_source_version'] = '7';
|
||||
* $settings['migrate_source_connection'] = 'migrate';
|
||||
* $settings['migrate_file_public_path'] = 'https://drupal7.com';
|
||||
* $settings['migrate_file_private_path'] = '/var/www/drupal7';
|
||||
* @endcode
|
||||
*/
|
||||
# $settings['migrate_source_connection'] = '';
|
||||
# $settings['migrate_source_version'] = '';
|
||||
# $settings['migrate_file_public_path'] = '';
|
||||
# $settings['migrate_file_private_path'] = '';
|
||||
|
||||
/**
|
||||
* Load local development override configuration, if available.
|
||||
*
|
||||
|
|
|
|||
|
|
@ -33,7 +33,7 @@
|
|||
* @see https://wiki.php.net/rfc/expectations
|
||||
*/
|
||||
assert_options(ASSERT_ACTIVE, TRUE);
|
||||
\Drupal\Component\Assertion\Handle::register();
|
||||
assert_options(ASSERT_EXCEPTION, TRUE);
|
||||
|
||||
/**
|
||||
* Enable local development services.
|
||||
|
|
|
|||
|
|
@ -22,7 +22,7 @@
|
|||
<rewrite>
|
||||
<rules>
|
||||
<rule name="Protect files and directories from prying eyes" stopProcessing="true">
|
||||
<match url="\.(engine|inc|install|module|profile|po|sh|.*sql|theme|twig|tpl(\.php)?|xtmpl|yml|svn-base)$|^(code-style\.pl|Entries.*|Repository|Root|Tag|Template|all-wcprops|entries|format|composer\.(json|lock)|\.htaccess)$" />
|
||||
<match url="\.(engine|inc|install|module|profile|po|sh|.*sql|theme|twig|tpl(\.php)?|xtmpl|yml|svn-base)$|^(code-style\.pl|Entries.*|Repository|Root|Tag|Template|all-wcprops|entries|format|composer\.(json|lock)|\.htaccess|yarn.lock|package.json)$" />
|
||||
<action type="CustomResponse" statusCode="403" subStatusCode="0" statusReason="Forbidden" statusDescription="Access is forbidden." />
|
||||
</rule>
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue