Issue 464 - November, 19th 2020
News
Drupal Core - Critical - Remote Code Execution - SA-CORE-2020-012
Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations. This issue is resolved by the latest release.
Drupal 8.9 and Drupal 9.0 Marked Incompatible with PHP 8
Drupal.org Blog: Live Deployment Previews for Drupal Core (Thanks to TugboatQA!)
DrupalCon News: DrupalCon Europe Will Only Sustain if You Show Up for It
Get Involved with the Future of Drupal at DrupalCon Europe!
Community Working Group Posts: A Different Kind of Contribution - Become a Trained Drupal Event Code of Conduct Contact
From Our Sponsor
Planning your Drupal 9 Upgrade from Drupal 7
The timer counts down on Drupal 7 EOL. Still on Drupal 7? Learn the different paths available for moving to a more modern version of Drupal today. Read the blog.
Articles
Smart Date 3.1 and Beyond
ForTheDev for the Holidays
The holidays are quickly approaching and you probably need to find gifts for those developers in your life. Maybe yourself? Pick up some of our great developer t-shirts including our work from home and Drupal shirts. Want a WeeklyDrop shirt? We have them and much more.
The 7 Best Practices of a Good Editorial Experience
Tutorials
Absolute Menu Links in Drupal 8
Core Web Vitals - How to Debug and Improve Cumulative Layout Shift (CLS) Issues
Webinar: 5 Ways to Give Your Dev Agency a Competitive Advantage
Learn how development agencies in today’s competitive landscape use automation tools to ship better code, faster — and stand out as a clear choice for prospective clients. Join Testery and Tugboat on December 9 at 1pm CT.