2024-10-02 (3 commits)

Overview

Several improvements, including better messages on error pages, more friendly output on cache headers, and better copy on generate-theme CLI command.

Changes

It covers commits from 2024-10-02 on 11.x branch.

#3457781: Maintenance pages leak sensitive environment information

#3457781 - 48b0aea1d573d9e01752f9909ec8cd3a1b7e3378

Improves error handling to prevent possible sensitive information to be presented on the error message.

#2951814: Improve X-Drupal-Cache and X-Drupal-Dynamic-Cache headers, even for responses that are not cacheable

#2951814 - 19f80f658ed319cb41ffd78082e5582673aa1ef0

Improves cache related headers in HTTP responses to better indicate what is happening.

Nice summary of the change on the related change record.

#3456699: The dotfiles are ignored when copied over in Starterkit

#3456699 - 2853cf08ff046337b9fa5c2fc9aa6b14bd34d0ec

Improves generate-theme command to copy dot files.

Annex

Meta

• Commits: 3
• Approach:
  • Direct commit: 0
  • Merge request + Patch: 2
  • Merge request: 1
  • Patch: 0
• Shortest running issue: 3 months
• Longest running issue: 6 years
• People: 18
• Volunteers: 7
• Organizations: 21
  • APQC
    • neclimdul
  • Acquia
    • wim leers
  • Acro Commerce
    • alexpott
  • ActivIT s.r.o.
    • poker10
  • Catalyst IT
    • ericgsmith
  • DM13 Security LLC
    • cmlara
  • Factorial GmbH
    • joachim
  • Full Fat Things
    • longwave
  • HeroDevs
    • greggles
    • xjm
  • Material
    • sanjayk
  • Mobomo
    • smustgrave
  • OPTASY
    • xjm
  • Pronovix
    • mxr576
  • QED42
    • vakulrai
  • Ramsalt Lab
    • doxigo
  • Salsa Digital
    • xjm
  • The University of British Columbia
    • joelpittet
  • Third and Grove
    • catch
  • Thunder
    • alexpott
  • Webikon
    • claudiu.cristea
  • Zoocha
    • xjm
  • Volunteers
    • claudiu.cristea
    • doxigo
    • joachim
    • mxr576
    • sanjayk
    • vakulrai
    • wim leers
• Maintainers accepting changes
  • Alex Pott
• Tags
  • dx (2)
  • tooling (1)
  • Starterkit Theme (1)
  • Security improvements (1)
  • Security (1)
  • security (1)
  • Needs Review Queue Initiative (1)
  • DX (Developer Experience) (1)
  • cacheability (8)
  • cache (1)
  • Barcelona2024 (1)
  • release notes (0)

The set

$ git log --oneline --reverse --since=2024-10-01T23:59:59+00:00 --until=2024-10-03T00:00:00+00:00
2853cf08ff Issue #3456699 by nicoschi, joelpittet, doxigo: The dotfiles are ignored when copied over in Starterkit
19f80f658e Issue #2951814 by wim leers, mxr576, vakulrai, claudiu.cristea, neclimdul, alexpott, sanjayk, joachim, chi, smustgrave: Improve X-Drupal-Cache and X-Drupal-Dynamic-Cache headers, even for responses that are not cacheable
48b0aea1d5 Issue #3457781 by catch, longwave, senscybersecurity, cmlara, cilefen, poker10, greggles, alexpott, ericgsmith, xjm: Maintenance pages leak sensitive environment information

$ git diff --shortstat 2853cf08ff~1..48b0aea1d5
 24 files changed, 193 insertions(+), 119 deletions(-)