Recording from June 26th 2015 Drupal 8 critical issues discussion

This was our fifth critical issues discussion meeting to be publicly recorded in a row. (See all prior recordings). Here is the recording of the meeting video and chat from today in the hope that it helps more than just those who were on the meeting:

Unfortunately not all people invited made it this time. If you also have significant time to work on critical issues in Drupal 8 and we did not include you, let me know as soon as possible.

The meeting log is as follows (all times are CEST real time at the meeting):

[11:04am] jibran: Issues https://www.drupal.org/project/issues/search/drupal?status[0]=1&status[1]=13&status[2]=8&status[3]=14&status[4]=4&priorities[0]=400&categories[0]=1&categories[1]=2&categories[2]=5&version[0]=8.x [11:07am] dawehner: <a href="https://www.drupal.org/node/2509300" title="https://www.drupal.org/node/2509300">https://www.drupal.org/node/2509300</a> [11:07am] Druplicon: <a href="https://www.drupal.org/node/2509300" title="https://www.drupal.org/node/2509300">https://www.drupal.org/node/2509300</a> => Path alias UI allows node/1 and /node/1 as system path then fatals [#2509300] => 55 comments, 5 IRC mentions [11:07am] dawehner: <a href="https://www.drupal.org/node/2408371" title="https://www.drupal.org/node/2408371">https://www.drupal.org/node/2408371</a> [11:07am] Druplicon: <a href="https://www.drupal.org/node/2408371" title="https://www.drupal.org/node/2408371">https://www.drupal.org/node/2408371</a> => Proxies of module interfaces don't work [#2408371] => 71 comments, 14 IRC mentions [11:13am] plach: alexpott: dawehner GaborHojtsy: WimLeers: hamletic questions in the critical meeting [11:13am] GaborHojtsy: plach: :P [11:13am] plach: :) [11:14am] WimLeers: "hamletic", wow :D [11:14am] plach: <a href="https://www.drupal.org/node/2478459" title="https://www.drupal.org/node/2478459">https://www.drupal.org/node/2478459</a> [11:14am] Druplicon: <a href="https://www.drupal.org/node/2478459" title="https://www.drupal.org/node/2478459">https://www.drupal.org/node/2478459</a> => FieldItemInterface methods are only invoked for SQL storage and are inconsistent with hooks [#2478459] => 105 comments, 26 IRC mentions [11:14am] plach: <a href="https://www.drupal.org/node/2453153" title="https://www.drupal.org/node/2453153">https://www.drupal.org/node/2453153</a> [11:14am] Druplicon: <a href="https://www.drupal.org/node/2453153" title="https://www.drupal.org/node/2453153">https://www.drupal.org/node/2453153</a> => Node revisions cannot be reverted per translation [#2453153] => 134 comments, 42 IRC mentions [11:14am] dawehner: alexpott: i mean our request context ->getCompleteBaseUrl is basically that [11:15am] alexpott: dawehner: yep [11:16am] dawehner: GH sadly does not allow you to filter by 3.0.issues [11:16am] WimLeers: that's weird [11:16am] jibran: <a href="https://www.drupal.org/node/2500523" title="https://www.drupal.org/node/2500523">https://www.drupal.org/node/2500523</a> [11:16am] Druplicon: <a href="https://www.drupal.org/node/2500523" title="https://www.drupal.org/node/2500523">https://www.drupal.org/node/2500523</a> => Rewrite views_ui_add_ajax_trigger() to not rely on /system/ajax. [#2500523] => 27 comments, 6 IRC mentions [11:16am] dawehner: alexpott: <a href="https://github.com/symfony/symfony/issues/6406#issuecomment-58411133" title="https://github.com/symfony/symfony/issues/6406#issuecomment-58411133">https://github.com/symfony/symfony/issues/6406#issuecomment-58411133</a> [11:19am] catch: <a href="https://www.drupal.org/node/2470679" title="https://www.drupal.org/node/2470679">https://www.drupal.org/node/2470679</a> [11:19am] Druplicon: <a href="https://www.drupal.org/node/2470679" title="https://www.drupal.org/node/2470679">https://www.drupal.org/node/2470679</a> => [meta] Identify necessary performance optimizations for common profiling scenarios [#2470679] => 62 comments, 15 IRC mentions [11:19am] catch: <a href="https://www.drupal.org/node/2497185" title="https://www.drupal.org/node/2497185">https://www.drupal.org/node/2497185</a> [11:19am] Druplicon: <a href="https://www.drupal.org/node/2497185" title="https://www.drupal.org/node/2497185">https://www.drupal.org/node/2497185</a> => Create standardized core profiling scenarios and start tracking metrics for them [#2497185] => 36 comments, 11 IRC mentions [11:19am] GaborHojtsy: lol, my chrome died, is the meeting still running? :) [11:19am] alexpott: GaborHojtsy: yes [11:19am] WimLeers: <a href="https://docs.google.com/spreadsheets/d/1iTFR2TVP-9961RUQ4of-N7jZLTOtfwf3NzNe12Bah9k/edit#gid=0" title="https://docs.google.com/spreadsheets/d/1iTFR2TVP-9961RUQ4of-N7jZLTOtfwf3NzNe12Bah9k/edit#gid=0">https://docs.google.com/spreadsheets/d/1iTFR2TVP-9961RUQ4of-N7jZLTOtfwf3...</a> [11:19am] dawehner: GaborHojtsy: yes [11:20am] GaborHojtsy: yay I got back the controls when it reopened [11:20am] GaborHojtsy: huh [11:20am] GaborHojtsy: will still be able to stop broadcast, etc. [11:20am] WimLeers: nice! [11:20am] Druplicon: darn tooting it sure is! [11:21am] WimLeers: <a href="https://www.drupal.org/node/2429287" title="https://www.drupal.org/node/2429287">https://www.drupal.org/node/2429287</a> [11:21am] Druplicon: <a href="https://www.drupal.org/node/2429287" title="https://www.drupal.org/node/2429287">https://www.drupal.org/node/2429287</a> => [meta] Finalize the cache contexts API & DX/usage, enable a leap forward in performance [#2429287] => 105 comments, 8 IRC mentions [11:22am] WimLeers: <a href="https://www.drupal.org/node/2450993" title="https://www.drupal.org/node/2450993">https://www.drupal.org/node/2450993</a> [11:22am] Druplicon: <a href="https://www.drupal.org/node/2450993" title="https://www.drupal.org/node/2450993">https://www.drupal.org/node/2450993</a> => Rendered Cache Metadata created during the main controller request gets lost [#2450993] => 104 comments, 20 IRC mentions [11:22am] WimLeers: <a href="https://www.drupal.org/node/2351015" title="https://www.drupal.org/node/2351015">https://www.drupal.org/node/2351015</a> [11:22am] Druplicon: <a href="https://www.drupal.org/node/2351015" title="https://www.drupal.org/node/2351015">https://www.drupal.org/node/2351015</a> => Link CSRF tokens can be hijacked when cached with insufficient contexts [#2351015] => 98 comments, 35 IRC mentions [11:24am] WimLeers: <a href="https://www.drupal.org/node/2429287" title="https://www.drupal.org/node/2429287">https://www.drupal.org/node/2429287</a> [11:24am] Druplicon: <a href="https://www.drupal.org/node/2429287" title="https://www.drupal.org/node/2429287">https://www.drupal.org/node/2429287</a> => [meta] Finalize the cache contexts API & DX/usage, enable a leap forward in performance [#2429287] => 105 comments, 9 IRC mentions [11:25am] WimLeers: <a href="https://www.drupal.org/node/2487600" title="https://www.drupal.org/node/2487600">https://www.drupal.org/node/2487600</a> [11:25am] Druplicon: <a href="https://www.drupal.org/node/2487600" title="https://www.drupal.org/node/2487600">https://www.drupal.org/node/2487600</a> => #access should support access result objects or better has to always use it [#2487600] => 17 comments, 1 IRC mention [11:27am] WimLeers: <a href="https://www.drupal.org/node/2493033" title="https://www.drupal.org/node/2493033">https://www.drupal.org/node/2493033</a> [11:27am] Druplicon: <a href="https://www.drupal.org/node/2493033" title="https://www.drupal.org/node/2493033">https://www.drupal.org/node/2493033</a> => Make 'user.permissions' a required cache context [#2493033] => 18 comments, 4 IRC mentions [11:29am] WimLeers: <a href="https://www.drupal.org/node/2473873" title="https://www.drupal.org/node/2473873">https://www.drupal.org/node/2473873</a> [11:29am] Druplicon: <a href="https://www.drupal.org/node/2473873" title="https://www.drupal.org/node/2473873">https://www.drupal.org/node/2473873</a> => Add cacheablity support for entity operations [#2473873] => 26 comments, 3 IRC mentions [11:34am] GaborHojtsy: <a href="https://www.drupal.org/node/2512460" title="https://www.drupal.org/node/2512460">https://www.drupal.org/node/2512460</a> [11:34am] Druplicon: <a href="https://www.drupal.org/node/2512460" title="https://www.drupal.org/node/2512460">https://www.drupal.org/node/2512460</a> => "Translate user edited configuration" permission needs to be marked as sensitive [#2512460] => 2 comments, 1 IRC mention [11:36am] GaborHojtsy: <a href="https://localize.drupal.org/node/63903" title="https://localize.drupal.org/node/63903">https://localize.drupal.org/node/63903</a> [11:36am] Druplicon: <a href="https://localize.drupal.org/node/63903" title="https://localize.drupal.org/node/63903">https://localize.drupal.org/node/63903</a> => Test the staging version of localize.drupal.org on Drupal 7 NOW! => 0 comments, 4 IRC mentions [11:36am] dawehner: alexpott: would you be okay with adding \Drupal\Core\Http to add things like TrustedRedirectResponse there? [11:46am] plach: <a href="https://www.drupal.org/node/2507899#comment-10059322" title="https://www.drupal.org/node/2507899#comment-10059322">https://www.drupal.org/node/2507899#comment-10059322</a> [11:46am] Druplicon: <a href="https://www.drupal.org/node/2507899" title="https://www.drupal.org/node/2507899">https://www.drupal.org/node/2507899</a> => [policy, no patch] Require hook_update_N() for Drupal 8 core patches beginning June 29 [#2507899] => 34 comments, 5 IRC mentions [11:48am] dawehner: <a href="https://www.drupal.org/node/2509898" title="https://www.drupal.org/node/2509898">https://www.drupal.org/node/2509898</a> [11:48am] Druplicon: <a href="https://www.drupal.org/node/2509898" title="https://www.drupal.org/node/2509898">https://www.drupal.org/node/2509898</a> => Additional uncaught exception thrown while handling exception after service changes [#2509898] => 3 comments, 1 IRC mention [11:49am] • jibran hates this cycle of exception rendering. [11:50am] WimLeers: <a href="https://www.drupal.org/node/2450993" title="https://www.drupal.org/node/2450993">https://www.drupal.org/node/2450993</a> [11:50am] Druplicon: <a href="https://www.drupal.org/node/2450993" title="https://www.drupal.org/node/2450993">https://www.drupal.org/node/2450993</a> => Rendered Cache Metadata created during the main controller request gets lost [#2450993] => 104 comments, 21 IRC mentions [11:54am] dawehner: <a href="https://www.drupal.org/node/2489024" title="https://www.drupal.org/node/2489024">https://www.drupal.org/node/2489024</a> [11:54am] Druplicon: <a href="https://www.drupal.org/node/2489024" title="https://www.drupal.org/node/2489024">https://www.drupal.org/node/2489024</a> => Arbitrary code execution via 'trans' extension for dynamic twig templates (when debug output is on) [#2489024] => 24 comments, 9 IRC mentions [12:03pm] WimLeers: <a href="https://www.drupal.org/project/issues/search/drupal?project_issue_followers=&status%5B%5D=1&status%5B%5D=13&status%5B%5D=8&status%5B%5D=14&status%5B%5D=15&status%5B%5D=4&priorities%5B%5D=400&version%5B%5D=8.x&issue_tags_op=%3D&issue_tags=D8+cacheability" title="https://www.drupal.org/project/issues/search/drupal?project_issue_followers=&status%5B%5D=1&status%5B%5D=13&status%5B%5D=8&status%5B%5D=14&status%5B%5D=15&status%5B%5D=4&priorities%5B%5D=400&version%5B%5D=8.x&issue_tags_op=%3D&issue_tags=D8+cacheability">https://www.drupal.org/project/issues/search/drupal?project_issue_follow...</a> [12:04pm] plach: WimLeers++ [12:04pm] plach: (oh boy :D) [12:04pm] WimLeers: :P [12:04pm] jibran: slow clap for WimLeers

Original Article:

Recording from June 26th 2015 Drupal 8 critical issues discussion