Issue 488 - May, 27th 2021

Headlines

Drupal Core - Moderately Critical - Cross Site Scripting - SA-CORE-2021-003

"Drupal core uses the third-party CKEditor library. This library has an error in parsing HTML that could lead to an XSS attack."

Off-Canvas Styles Are Now Reset Inclusively Instead of Exclusively

Permissions-Policy Header Is Added by Default to Disable a Method of Browser-Based User Tracking

From Our Sponsor

Articles

A Plan for Upgrading from Drupal 8 to Drupal 9

If you are planning to upgrade to D9 this article from Lullabot is worth reading.

Speed Up Drupal’s Front-End with WebP Images

Why Update PHP: An All Inclusive Guide

Tutorials

A Brief Overview of the Token System

A Drupal JavaScript Behavior for Marking Edited Line Items in the Cart

Adding Custom oEmbed Providers to Remote Video Media Source with Drupal 9 & Drupal 8 oEmbed Providers Module

Sponsor This Newsletter

For almost nine years TheWeeklyDrop has been a community fixture sending news and resources to the community every week. If you would like to get your message in front of the Drupal community TheWeeklyDrop is the right medium for you.

How to Resolve Out of Memory Issue on Composer

Setting Up Multilingual Content Views

Releases

Drupal 8.9.16

advanced_cors 8.x-1.2

entity_type_clone 8.x-1.7

Geolocation 8.x-3.6

Keycloak 8.x-1.4

menu_block_current_language 8.x-1.6

quick_links 1.0.0

smart_date 3.3.0

smart_date_starter_kit 2.1.0

Storage 1.0.0

Video

Drupal Project Browser Initiative Meeting - May 24, 2021

Podcasts

Talking Drupal #294 - Drutiny

Talking Drupal #295 - 31 Days of Migration