Adds CSRF protection for enabling and disabling splits.
Mark disabled tests as skipped. Fix phpcs errors. Fix email obfuscation problem.
Adds CSRF protection to client enable routes.
Fixes SA-CONTRIB-2025-008
Shubham Rathore, shelane, shubhamrathore01
Issues: 1 issues resolved.
Changes since 8.x-1.23:
In addition to the news page and sub-tabs, all security announcements are posted to an email list. To subscribe to email: log in, go to your user profile page and subscribe to the security newsletter on the Edit » My newsletters tab.
You can also get rss feeds for core, contrib, or public service announcements or follow drupalsecurity@drupal.community on Mastodon or @drupalsecurity on Bluesky.
In order to report a security issue, or to learn more about the security team, please see the Security team handbook page.
If you are a Drupal developer, please read the handbook section on Writing secure code.