Recording from July 3rd 2015 Drupal 8 critical issues discussion
This was our 6th critical issues discussion meeting to be publicly recorded in a row. (See all prior recordings). Here is the recording of the meeting video and chat from today in the hope that it helps more than just those who were on the meeting:
If you also have significant time to work on critical issues in Drupal 8 and we did not include you, let me know as soon as possible.
The meeting log is as follows (all times are CEST real time at the meeting):
<br>[11:06am] alexpott: <a href="https://www.drupal.org/node/2280965" title="https://www.drupal.org/node/2280965">https://www.drupal.org/node/2280965</a><br>[11:06am] Druplicon: <a href="https://www.drupal.org/node/2280965" title="https://www.drupal.org/node/2280965">https://www.drupal.org/node/2280965</a> => [meta] Remove or document every SafeMarkup::set() call [#2280965] => 90 comments, 13 IRC mentions<br>[11:06am] alexpott: <a href="https://www.drupal.org/node/2506581" title="https://www.drupal.org/node/2506581">https://www.drupal.org/node/2506581</a><br>[11:06am] Druplicon: <a href="https://www.drupal.org/node/2506581" title="https://www.drupal.org/node/2506581">https://www.drupal.org/node/2506581</a> => Remove SafeMarkup::set() from Renderer::doRender [#2506581] => 49 comments, 9 IRC mentions<br>[11:07am] alexpott: <a href="https://www.drupal.org/node/2506195" title="https://www.drupal.org/node/2506195">https://www.drupal.org/node/2506195</a><br>[11:07am] Druplicon: <a href="https://www.drupal.org/node/2506195" title="https://www.drupal.org/node/2506195">https://www.drupal.org/node/2506195</a> => Remove SafeMarkup::set() from XSS::filter() [#2506195] => 40 comments, 3 IRC mentions<br>[11:09am] dawehner: <a href="https://www.drupal.org/node/2502785" title="https://www.drupal.org/node/2502785">https://www.drupal.org/node/2502785</a><br>[11:09am] Druplicon: <a href="https://www.drupal.org/node/2502785" title="https://www.drupal.org/node/2502785">https://www.drupal.org/node/2502785</a> => Remove support for #ajax['url'] and $form_state->setCached() for GET requests [#2502785] => 51 comments, 18 IRC mentions<br>[11:09am] Druplicon: dawehner: 5 hours 36 sec ago <yesct> tell dawehner you might already be following <a href="https://www.drupal.org/node/1412090" title="https://www.drupal.org/node/1412090">https://www.drupal.org/node/1412090</a> but I figure you would be in favor.<br>[11:10am] alexpott: GaborHojtsy: do you what the you link is for the live hangout?<br>[11:11am] GaborHojtsy: live hangout page: <a href="http://youtu.be/rz_EissgU7Q" title="http://youtu.be/rz_EissgU7Q">http://youtu.be/rz_EissgU7Q</a><br>[11:11am] GaborHojtsy: alexpott: ^^^<br>[11:11am] GaborHojtsy: to watch that is<br>[11:11am] alexpott: GaborHojtsy: thanks!<br>[11:12am] plach: <a href="https://www.drupal.org/node/2453153" title="https://www.drupal.org/node/2453153">https://www.drupal.org/node/2453153</a><br>[11:12am] Druplicon: <a href="https://www.drupal.org/node/2453153" title="https://www.drupal.org/node/2453153">https://www.drupal.org/node/2453153</a> => Node revisions cannot be reverted per translation [#2453153] => 159 comments, 58 IRC mentions<br>[11:12am] plach: <a href="https://www.drupal.org/node/2453175" title="https://www.drupal.org/node/2453175">https://www.drupal.org/node/2453175</a><br>[11:12am] Druplicon: <a href="https://www.drupal.org/node/2453175" title="https://www.drupal.org/node/2453175">https://www.drupal.org/node/2453175</a> => Remove EntityFormInterface::validate() and stop using button-level validation by default in entity forms [#2453175] => 79 comments, 9 IRC mentions<br>[11:14am] plach: <a href="https://www.drupal.org/node/2478459" title="https://www.drupal.org/node/2478459">https://www.drupal.org/node/2478459</a><br>[11:14am] Druplicon: <a href="https://www.drupal.org/node/2478459" title="https://www.drupal.org/node/2478459">https://www.drupal.org/node/2478459</a> => FieldItemInterface methods are only invoked for SQL storage and are inconsistent with hooks [#2478459] => 112 comments, 29 IRC mentions<br>[11:14am] larowlan: <a href="https://www.drupal.org/node/2354889" title="https://www.drupal.org/node/2354889">https://www.drupal.org/node/2354889</a><br>[11:14am] Druplicon: <a href="https://www.drupal.org/node/2354889" title="https://www.drupal.org/node/2354889">https://www.drupal.org/node/2354889</a> => Make block context faster by removing onBlock event and replace it with loading from a BlockContextManager [#2354889] => 100 comments, 19 IRC mentions<br>[11:15am] larowlan: <a href="https://www.drupal.org/node/2421503" title="https://www.drupal.org/node/2421503">https://www.drupal.org/node/2421503</a><br>[11:16am] Druplicon: <a href="https://www.drupal.org/node/2421503" title="https://www.drupal.org/node/2421503">https://www.drupal.org/node/2421503</a> => SA-CORE-2014-002 forward port only checks internal cache [#2421503] => 46 comments, 11 IRC mentions<br>[11:16am] larowlan: <a href="https://www.drupal.org/node/2512460" title="https://www.drupal.org/node/2512460">https://www.drupal.org/node/2512460</a><br>[11:16am] Druplicon: <a href="https://www.drupal.org/node/2512460" title="https://www.drupal.org/node/2512460">https://www.drupal.org/node/2512460</a> => "Translate user edited configuration" permission needs to be marked as restricted [#2512460] => 20 comments, 8 IRC mentions<br>[11:17am] WimLeers: catch: pfrenssen is likely gonna be working on the "numerous paramconverters" issue<br>[11:17am] WimLeers: the issue catch talked about: <a href="https://www.drupal.org/node/2512718" title="https://www.drupal.org/node/2512718">https://www.drupal.org/node/2512718</a><br>[11:17am] Druplicon: <a href="https://www.drupal.org/node/2512718" title="https://www.drupal.org/node/2512718">https://www.drupal.org/node/2512718</a> => Numerous ParamConverters in core break the route / url cache context [#2512718] => 22 comments, 12 IRC mentions<br>[11:17am] catch: WimLeers: did you discuss last night's discussion with him already?<br>[11:18am] WimLeers: <a href="https://www.drupal.org/project/issues/search/drupal?project_issue_followers=&status%5B%5D=1&status%5B%5D=13&status%5B%5D=8&status%5B%5D=14&status%5B%5D=15&status%5B%5D=4&priorities%5B%5D=400&version%5B%5D=8.x&issue_tags_op=%3D&issue_tags=D8+cacheability" title="https://www.drupal.org/project/issues/search/drupal?project_issue_followers=&status%5B%5D=1&status%5B%5D=13&status%5B%5D=8&status%5B%5D=14&status%5B%5D=15&status%5B%5D=4&priorities%5B%5D=400&version%5B%5D=8.x&issue_tags_op=%3D&issue_tags=D8+cacheability">https://www.drupal.org/project/issues/search/drupal?project_issue_follow...</a><br>[11:19am] WimLeers: <a href="https://www.drupal.org/node/2450993" title="https://www.drupal.org/node/2450993">https://www.drupal.org/node/2450993</a><br>[11:19am] Druplicon: <a href="https://www.drupal.org/node/2450993" title="https://www.drupal.org/node/2450993">https://www.drupal.org/node/2450993</a> => Rendered Cache Metadata created during the main controller request gets lost [#2450993] => 132 comments, 27 IRC mentions<br>[11:20am] pfrenssen: catch: WimLeers: yes I'm working on that, for the moment just studying how it works<br>[11:20am] berdir: WimLeers: I think we can also demote it if all the other must issues are critical on their own<br>[11:20am] GaborHojtsy: <a href="https://www.drupal.org/node/2512460" title="https://www.drupal.org/node/2512460">https://www.drupal.org/node/2512460</a><br>[11:20am] Druplicon: <a href="https://www.drupal.org/node/2512460" title="https://www.drupal.org/node/2512460">https://www.drupal.org/node/2512460</a> => "Translate user edited configuration" permission needs to be marked as restricted [#2512460] => 20 comments, 9 IRC mentions<br>[11:20am] catch: pfrenssen: cool. I'll be around most of today so just ping if you want to discuss.<br>[11:21am] GaborHojtsy: <a href="https://www.drupal.org/node/2512466" title="https://www.drupal.org/node/2512466">https://www.drupal.org/node/2512466</a><br>[11:21am] Druplicon: <a href="https://www.drupal.org/node/2512466" title="https://www.drupal.org/node/2512466">https://www.drupal.org/node/2512466</a> => Config translation needs to be validated on input for XSS (like other t string input) [#2512466] => 34 comments, 3 IRC mentions<br>[11:21am] WimLeers: pfrenssen++<br>[11:21am] WimLeers: berdir: assuming you're talking about <a href="https://www.drupal.org/node/2429287" title="https://www.drupal.org/node/2429287">https://www.drupal.org/node/2429287</a> — then yes, that's exactly the plan :)<br>[11:21am] Druplicon: <a href="https://www.drupal.org/node/2429287" title="https://www.drupal.org/node/2429287">https://www.drupal.org/node/2429287</a> => [meta] Finalize the cache contexts API & DX/usage, enable a leap forward in performance [#2429287] => 112 comments, 10 IRC mentions<br>[11:21am] GaborHojtsy: <a href="https://www.drupal.org/node/2489024" title="https://www.drupal.org/node/2489024">https://www.drupal.org/node/2489024</a><br>[11:21am] Druplicon: <a href="https://www.drupal.org/node/2489024" title="https://www.drupal.org/node/2489024">https://www.drupal.org/node/2489024</a> => Arbitrary code execution via 'trans' extension for dynamic twig templates (when debug output is on) [#2489024] => 43 comments, 12 IRC mentions<br>[11:22am] GaborHojtsy: <a href="https://www.drupal.org/node/2512718" title="https://www.drupal.org/node/2512718">https://www.drupal.org/node/2512718</a><br>[11:22am] Druplicon: <a href="https://www.drupal.org/node/2512718" title="https://www.drupal.org/node/2512718">https://www.drupal.org/node/2512718</a> => Numerous ParamConverters in core break the route / url cache context [#2512718] => 22 comments, 13 IRC mentions<br>[11:22am] xjm: GaborHojtsy: I took care of updating the security polict with mlhess<br>[11:22am] xjm: GaborHojtsy: that's done<br>[11:23am] • xjm listening to the meeting but cannot join because of 10 person limit<br>[11:23am] GaborHojtsy: xjm: yay<br>[11:23am] GaborHojtsy: xjm++<br>[11:24am] WimLeers: Yes<br>[11:24am] WimLeers: I DO HAVE A MICROPHONE!!!<br>[11:24am] WimLeers: :P<br>[11:24am] xjm: GaborHojtsy: <a href="https://www.drupal.org/node/475848/revisions/view/7267195/8630716" title="https://www.drupal.org/node/475848/revisions/view/7267195/8630716">https://www.drupal.org/node/475848/revisions/view/7267195/8630716</a> now restrict access is mentioned explicitly, so any perm that has it is covered<br>[11:24am] Druplicon: <a href="https://www.drupal.org/node/475848" title="https://www.drupal.org/node/475848">https://www.drupal.org/node/475848</a> => Security advisories process and permissions policy => 0 comments, 1 IRC mention<br>[11:25am] larowlan: <a href="https://www.drupal.org/node/2509898" title="https://www.drupal.org/node/2509898">https://www.drupal.org/node/2509898</a><br>[11:25am] Druplicon: <a href="https://www.drupal.org/node/2509898" title="https://www.drupal.org/node/2509898">https://www.drupal.org/node/2509898</a> => Additional uncaught exception thrown while handling exception after service changes [#2509898] => 22 comments, 5 IRC mentions<br>[11:25am] alexpott: WimLeers: a working microphone :)<br>[11:28am] WimLeers: alexpott: all of you guys are breaking up for me from time to time. It looks like it's something with Chrome/Hangouts :(<br>[11:28am] xjm: WimLeers: yeah I had to use FF<br>[11:28am] WimLeers: My mic *works* if I test it locally.<br>[11:28am] WimLeers: xjm: lol, the beautiful irony<br>[11:30am] WimLeers: berdir: alexpott: I checked and I agree with the change you guys just asked me feedback on: <a href="https://www.drupal.org/node/2375695#comment-10082188" title="https://www.drupal.org/node/2375695#comment-10082188">https://www.drupal.org/node/2375695#comment-10082188</a><br>[11:30am] Druplicon: <a href="https://www.drupal.org/node/2375695" title="https://www.drupal.org/node/2375695">https://www.drupal.org/node/2375695</a> => Condition plugins should provide cache contexts AND cacheability metadata needs to be exposed [#2375695] => 117 comments, 40 IRC mentions<br>[11:32am] alexpott: <a href="https://www.drupal.org/node/2497243" title="https://www.drupal.org/node/2497243">https://www.drupal.org/node/2497243</a><br>[11:32am] Druplicon: <a href="https://www.drupal.org/node/2497243" title="https://www.drupal.org/node/2497243">https://www.drupal.org/node/2497243</a> => Rebuilding service container results in endless stampede [#2497243] => 97 comments, 22 IRC mentions<br>[11:33am] • larowlan using FF too, doesn't trust Google<br>[11:33am] alexpott: dawehner, catch: anyone got the nid of the chx container issue?<br>[11:33am] dawehner: <a href="https://www.drupal.org/node/2513326" title="https://www.drupal.org/node/2513326">https://www.drupal.org/node/2513326</a><br>[11:33am] catch: alexpott: <a href="https://www.drupal.org/node/2513326" title="https://www.drupal.org/node/2513326">https://www.drupal.org/node/2513326</a><br>[11:33am] Druplicon: <a href="https://www.drupal.org/node/2513326" title="https://www.drupal.org/node/2513326">https://www.drupal.org/node/2513326</a> => Performance: create a PHP storage backend directly backed by cache [#2513326] => 43 comments, 13 IRC mentions<br>[11:33am] Druplicon: <a href="https://www.drupal.org/node/2513326" title="https://www.drupal.org/node/2513326">https://www.drupal.org/node/2513326</a> => Performance: create a PHP storage backend directly backed by cache [#2513326] => 43 comments, 14 IRC mentions<br>[11:34am] catch: beat me.<br>[11:36am] larowlan: <a href="https://www.drupal.org/node/2511568" title="https://www.drupal.org/node/2511568">https://www.drupal.org/node/2511568</a> for the ctools issue I mentioned<br>[11:36am] Druplicon: <a href="https://www.drupal.org/node/2511568" title="https://www.drupal.org/node/2511568">https://www.drupal.org/node/2511568</a> => Create "context stack" service where available contexts can be registered [#2511568] => 0 comments, 3 IRC mentions<br>[11:41am] xjm: dropping off now to walk to the venue<br>[11:41am] alexpott: pfrenssen++<br>[11:50am] GaborHojtsy: for browser we are working on <a href="https://www.drupal.org/node/2430335" title="https://www.drupal.org/node/2430335">https://www.drupal.org/node/2430335</a><br>[11:50am] Druplicon: <a href="https://www.drupal.org/node/2430335" title="https://www.drupal.org/node/2430335">https://www.drupal.org/node/2430335</a> => Browser language detection is not cache aware [#2430335] => 47 comments, 21 IRC mentions<br>[11:50am] GaborHojtsy: Fabianx-screen: see above<br>[11:51am] berdir: and it's not a blocker<br>[11:51am] berdir: because right now it just kills page/smart cache<br>[11:51am] berdir: so if you use that, you are not seeing a cached page anyway<br>[11:51am] berdir: Fabianx-screen: we have a cache context for the content language<br>[11:52am] xjm: the youtube video has like a 20 second delay<br>[11:53am] GaborHojtsy: xjm: we get what we pay for :D<br>[11:54am] xjm: now I am talking<br>[11:55am] plach: <a href="https://www.drupal.org/node/2453175#comment-10080242" title="https://www.drupal.org/node/2453175#comment-10080242">https://www.drupal.org/node/2453175#comment-10080242</a><br>[11:55am] Druplicon: <a href="https://www.drupal.org/node/2453175" title="https://www.drupal.org/node/2453175">https://www.drupal.org/node/2453175</a> => Remove EntityFormInterface::validate() and stop using button-level validation by default in entity forms [#2453175] => 79 comments, 10 IRC mentions<br>[11:55am] xjm: more like 60s<br>[11:55am] GaborHojtsy: xjm: well, you’ll be in the recording forver now :D<br>[11:55am] xjm: :P<br>[11:56am] xjm: GaborHojtsy: is there any way to increase the number of participants or to include the chat sidebar in the video?<br>[11:56am] WimLeers1: catch: Can you leave a comment on <a href="https://www.drupal.org/node/2512718" title="https://www.drupal.org/node/2512718">https://www.drupal.org/node/2512718</a> with your POV/conclusion — sounds like you have the clearest grasp on this/completest view on the likely solution.<br>[11:56am] Druplicon: <a href="https://www.drupal.org/node/2512718" title="https://www.drupal.org/node/2512718">https://www.drupal.org/node/2512718</a> => Numerous ParamConverters in core break the route / url cache context [#2512718] => 23 comments, 14 IRC mentions<br>[11:56am] WimLeers1: xjm: chat is here, we don't use Google Hangout's chat sidebar<br>[11:56am] GaborHojtsy: xjm: the chat window is THIS ONE<br>[11:57am] larowlan: xjm: the chat one is lost soon as the call ends<br>[11:57am] xjm: WimLeers: GaborHojtsy: so the thing is that listening to the video it's very hard to figure out which issues people are discussing, even with Gábor's notes<br>[11:57am] larowlan: xjm: you can get more than 10 in the call if you have a corporate account I think<br>[11:57am] WimLeers: larowlan: Gábor copy/pastes this chat to the g.d.o post with the link of the recording<br>[11:57am] • larowlan nods<br>[11:57am] WimLeers: that was meant for xjm, oops<br>[11:58am] GaborHojtsy: xjm: the trick is if we would start on time, then my chat log shows timestamps which are sync with the video<br>[11:58am] GaborHojtsy: xjm: we have a few minute delay between the video start and the top of the hour<br>[11:58am] catch: WimLeers: yep will do.<br>[11:59am] GaborHojtsy: xjm: because people arrive later basically :)<br>[11:59am] WimLeers: catch++<br>[12:01pm] GaborHojtsy: xjm: its also hard to get Druplicon in google hangouts — as in impossible ÉD<br>[12:01pm] GaborHojtsy: xjm: and there was some interest for people watching to be able to follow links WHILE the meeting was on<br>[12:02pm] xjm: GaborHojtsy: but it doesn't work -- I'm trying that right now -- the delay is too big<br>[12:02pm] WimLeers: alexpott: regarding <em> in title: <a href="https://api.drupal.org/comment/26#comment-26" title="https://api.drupal.org/comment/26#comment-26">https://api.drupal.org/comment/26#comment-26</a><br>[12:03pm] GaborHojtsy: xjm: well, then at least the Druplicon advantage is there :)<br>[12:03pm] GaborHojtsy: xjm: I am happy to use some way to get the comments in if there is one<br>[12:04pm] GaborHojtsy: xjm: I am not sure it helps if eg. someone shares their screen with an IRC client throughout the video<br>[12:04pm] GaborHojtsy: xjm: the links are not clickable either<br>[12:04pm] xjm: GaborHojtsy: shannon did that for the meeting we had 2y ago -- though the same problem with links not being clickable<br>[12:04pm] GaborHojtsy: xjm: but that may be a workaround<br></em></yesct>