Drupal官网安全更新（2023-09-07）

drupal 10.1.3

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.<br/><br/>Drupal 10.1.x will receive security coverage until June 2024.<br/>Important update information<br/>If you are updating from Drupal 9, refer to Preparing your site to upgrade to a newer major version for tools you can use to check the Drupal 10 compatibility of modules, themes and sites. Then, upgrade from Drupal 9 to 10. You should also check the Drupal 10.0.0 release notes.<br/>Important changes in this release<br/><br/><br/>CKEditor 5 has been updated to 39.0.1. This fixes a long-standing data loss critical bug: until now, CKEditor 5 stripped all inline empty elements, which are typically used for inline icons using markup such as &amp;lt;i class=&#34;icon icon-druplicon&#34;&amp;gt;&amp;lt;/i&amp;gt; or &amp;lt;span class=&#34;icon icon-druplicon&#34;&amp;gt;&amp;lt;/span&amp;gt;. Going forward, this is supported, but requires the Source Editing plugin to be configured to allow &amp;lt;i class&amp;gt; or &amp;lt;span class&amp;gt;, respectively. This must be configured manually, which is better than in CKEditor 4, where it required custom code.<br/><br/><br/>A new DeprecationHelper API has been added to enable contributed modules to support multiple versions of core more easily. Contributed modules may add a minimum dependency on Drupal 10.1.3 if they want to start using this API.<br/><br/><br/>All changes in this release<br/><br/>Issue #3384667 by Gábor Hojtsy, quietone: Add Gábor Hojtsy as facilitator to MAINTAINERS.txt<br/>Issue #3384764 by fjgarlin, longwave: ImageUrlTest fails on GitlabCI integration<br/>Issue #2010368 by fjgarlin, Pancho, poker10, daffie: Installer can&#39;t create new database on PostgreSQL<br/>Issue #3100826 by ilya.no, mwilbur, nikita_tt, smustgrave, quietone: AJAX pager doesn&#39;t work with exposed filter which has a default value<br/>Issue #3311469 by Rajeshreeputra, Internetter, fjgarlin, skyredwang: Absolute path for oembed iframe<br/>Issue #2986962 by fjgarlin, ppseftogiannis, smustgrave, Sut3kh: BrowserTestBase::drupalGet() does not appear to be handling base url properly<br/>Issue #3344789 by acbramley, Berdir, fenstrat, benjifisher, borisson_: Return early in EntityPermissionsForm::access if the user does not have &#34;administer permissions&#34;<br/>Issue #2514960 by Aki Tendo, catch: \Drupal\Core\Theme\Registry-&amp;gt;build() does not always return \Drupal\Core\Utility\ThemeRegistry<br/>Issue #3381097 by catch, b_sharpe, TwoD: Need to catch Peast exceptions<br/>Issue #3327294 by poker10, alexpott: Username enumeration via one time login route when logged in as another user<br/>Issue #3355381 by catch, drewcking, stewest, bnjmnm, lmoeni, fngatia, kevinquillen, Danny Englander, Ambient.Impact, gapple, manikandank03, lucasvm: Investigate better ways to add anti-flicker JS<br/>Issue #3382123 by catch, smustgrave, nicxvan: Update Peast to 1.15.4<br/>Issue #3379430 by nlisgo, kostyashupenko, Chi, smustgrave: Umami theme should declare dependency on SDC<br/>Issue #3378341 by gapple, acbramley: claro.jquery.ui css assets may be added the page multiple times<br/>Issue #3381660 by chesn0k: Documentation problem with node_is_page<br/>Issue #3371619 by bbrala, andypost, dww, mglaman, Kingdutch, catch, mondrake, heddn, Charlie ChX Negyesi: Implement utility method for invoking backward compatible code<br/>Issue #3378657 by dineshkumarbollu, gorkagr, smustgrave: Duplicate declaration of $context in WidgetBase<br/>Issue #3377318 by Spokje, longwave, znerol: Remove cruft from LanguageNegotiationMethodManager<br/>Issue #3218087 by nlisgo, Gribnif, Lendude, smustgrave: Views MysqlDateSql::getDateFormat() should translate PHP&#39;s &#39;o&#39; format to MySQL&#39;s &#39;%x&#39;<br/>Issue #3212759 by Lendude, ckaotik: Ensure views Translate tabs are visible when editing<br/>Issue #3368509 by Spokje, Wim Leers, quietone: [Random test failure] Random failure in CKEditor5AllowedTagsTest::testMediaElementAllowedTags<br/>Issue #3380637 by lauriii, Wim Leers: Update CKEditor 5 to 39.0.1<br/>Issue #3326261 by juanolalla, Wim Leers, lauriii, smustgrave, witeksocha, jwilson3, ChrisSnyder, ericras, Reinmar, jds1, Luke.Leber: [Style] Add tests for inability to apply styles to div, ul, ol, table etc. in CKEditor 5 — and a allows applying it to all elements<br/>Issue #3379525 by quietone, smustgrave: Convert enable/disable to install/uninstall in exception text<br/>Issue #3379089 by nlisgo, elgandoz, smustgrave: Hardcoded color class for site branding when using RTL<br/>Issue #3377562 by Wim Leers, Spokje, longwave, witeksocha, Reinmar: Update CKEditor 5 to 39.0.0<br/>Issue #3374253 by TwoD, smustgrave, catch, lauriii: The renderer throws away cache metadata from access result if it is not allowed<br/>Issue #2559961 by angrytoast, Krzysztof Domański, drup16, Lendude, vasike, Leksat, sam711, tar_inet, mlncn, JordiK, adinac, Pascal-, joshua.boltz, froboy, oriol_e9g, alison, codesmith, luenemann, specky_rum, daffie: ManyToOneHelper ignores group configuration for some cases<br/>Issue #3377131 by longwave, smustgrave: File mode check in commit-code-check.sh is too strict<br/>Release type:&amp;nbsp;Bug fixes

Drupal是使用PHP语言编写的开源内容管理框架（CMF），它由内容管理系统（CMS）和PHP开发框架（Framework）共同构成。

暂无

暂无

暂无

https://www.drupal.org/project/drupal/releases/10.1.3