Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.So for those web-sites which still use a DsRegionBlock functionality (i.e. it makes it possible to create blocks from entity fields from a view display), there is a problem in rendering style HTML attribute (for all tags) since markup being rendered is passed in an Xss::attributes (where style attribute will be stripped off).
It started to occur from DS version 3.4 - because drupal_render_children (which is going to be deprecated in 9.x Drupal) was replaced with similar logic. The problem is - $output is returned as a string - but should be returned as a Markup::create object. (so the markup is tagged as a safe and won't be passed into an Xss filtering)
| Comment | File | Size | Author |
|---|---|---|---|
| #2 | markup-as-object-3150889-2.patch | 683 bytes | Stockticker |
Comments
Comment #2
Stockticker CreditAttribution: Stockticker at Internetdevels, Drupal Ukraine Community commentedAttaching a patch that solves this issue (which is a pretty critical issue for my client's site.)
Comment #3
Stockticker CreditAttribution: Stockticker at Internetdevels, Drupal Ukraine Community commentedComment #4
Stockticker CreditAttribution: Stockticker at Internetdevels, Drupal Ukraine Community commentedComment #6
swentel CreditAttribution: swentel at eps & kaas for Dropsolid commentedCommitted and pushed to the 8.x-3.x branch, thanks!
New release is approximately at the end of this month.
The 8.x-4.x branch does not have this functionality anymore, so no need for a commit there.