Drupal CMS News Digest

developments tricks, articles and reviews from Drupal specialists

News Categories: SEO  Design  Marketing
BADCamp News: BADCamp 2021 - Nonprofit Technology Summit
BADCamp 2021 - Nonprofit Technology Summit Mon, 10/18/2021 - 12:00 volkswagenchick Mon, 10/18/2021 - 14:08 Join nonprofit peers on October 28th for a free, hands-on virtual event that will help nonprofits leverage technology to scale their capacity and impact. As a participant, you will be invited to take TechSoup’s Digital Assessment Tool to help identify your organization’s most pressing technology opportunities. Then join small group conversations with peers and subject matter experts around:  Drupal Planet
Talking Drupal: Talking Drupal #316 - Accessibility
Today we are talking about Accessibility with Rain Breaw Michaels. TalkingDrupal.com/316 Topics We are talking about Accessibility today, but specifically gearing the conversation towards developers. Why? So many people when coding for accessibility simply provide workarounds. Why can this be dangerous? What is ARIA? What is meant by the term Landmarks? How does this apply to dev’s working with Drupal? What modules do you recommend? How can you help content editors maintain accessibility while adding content? What are common pitfalls you see devs make How can Javascript help or hurt Accessibility? In closing, is there anything you would like to add? Module of the Week Anti Spam by CleanTalk Resources Clean Talk - Geerling’s Post Anti-spam by Clean Talk Acquia Engage Time Timer Driven to Distraction Design of everyday things (Book) ColorCube - Color Testing Tool ARIA WAI-ARIA HTML 5 Landmarks Module for decorative images Editoria11y Layout Builder Content Strategy for the Web PDF Accessibility course on Deque VPAT Hanlon’s Razor: “never attribute to malice that which is adequately explained by stupidity” Guest Rain Breaw Michaels - @rainbreaw Hosts Nic Laflin - www.nLighteneddevelopment.com @nicxvan John Picozzi - www.epam.com @johnpicozzi Chad Hester - www.chadkhester.com @chadkhester
Tag1 Consulting: On 20 Years of Drupal - an interview with James Rutherford
Tag1 continues its series celebrating 20 Years of Drupal in this Tag1 Team Talk with Pantheon’s Senior Manager of Strategic Partnerships, James Rutherford. Before moving to Pantheon, James was a long time member of Mediacurrent, one of the largest agencies working with and creating Drupal websites. James joins Tag1 Managing Director Michael Meyers for another trip down the halls of Drupal history, from early versions of Drupal, to today’s highly experienced agencies. James' initial Drupal experience was with Georgia Public Broadcasting. Over the years, James has worked with many clients - some of whom moved to Drupal from their homegrown CMS, to major launches such as weather.com. Join us for this talk, and learn more about how it’s not just the code - it’s the community that makes Drupal successful. --- For a transcript of this video, see Transcript - 20 years of Drupal with James Rutherford. --- Photo by Moritz Kindler on UnsplashRead more lynette@tag1co… Mon, 10/18/2021 - 07:07
OpenSense Labs: Drupal accessibility modules: The essentials
Drupal accessibility modules: The essentials Maitreayee Bora Mon, 10/18/2021 - 16:52 Web accessibility is always prioritized by Drupal to provide its potential users a decent user-experience. Without any fail, Drupal has succeeded in providing an extensive range of modules that can be downloaded according to user convenience. This platform has consistently put efforts in bringing significant improvements in all its versions when it comes to accessibility modules. So, with this article, I will try to give you an insight of some of the recently refreshed or newly released Drupal modules that will efficiently help you in your various challenging projects. You will also get the answer to a common question that often comes to your mind, “Why Drupal for accessibility”? To begin with, for your better understanding, I am describing the Drupal web accessibility modules by categorizing them based on their different functionalities. 
Accessibility Auditing Under this category Drupal has a sufficient number of modules that help in offering you an enhanced accessibility audit for your ambitious projects.
Editoria11y Accessibility Checker Editoria11y can be termed as a user-friendly checker that provides support to the content authors and editors. Compatible with Drupal 9, it also looks after the three most vital needs of the content authors.  It makes sure...
Ny Media: Entity bundle classes and its possibilities
Entity bundle classes and its possibilities alf.harald October 18, 2021 Projects vary vastly in terms of complexity. Sometimes there are just one or two entities, sometimes a standard product structure. But what happens when you have several layers of interconnected nodes or terms that rely on each other via custom entity reference fields? My take is, it may (will) tip over to becoming messy code, very fast. Say we are doing an online class. We have 3 entities: A group of people A participant in this group A physical person (which can be in multiple groups) And let's say we have this structure organized as nodes, with entity reference fields defining the connections. Core & contrib entity behavior Let's say that we are preparing some data from this structure. Based on a participant, we are going to find the description of the group to display in some template somwehere. Just traversing the fields of nodes, we would do this: // Get the description and location of the group $group_participant = $a_node; $group = $group_participant->field_group_reference->entity->field_text->value; $location = $group_participant->field_group_reference->entity->field_location->value; This is the most standard thing to see in custom Drupal code when traversing entity reference fields. Alas, very unfriendly code in terms of readability, eh? In...
#! code: Drupal 9: Loading All Routes From A Module
When creating Drupal modules I like to keep the hard coded components to a minimum. This helps when changing parts of the module in the future as hard coded links and other elements will require manual intervention and slow down maintenance. Sometimes, though, this isn't an option as you just need to have a few routes in your *.routing.yml file that point to controllers or forms within your module. I had a situation today where I was looking to load all of the routes that are contained in a module. I could then construct a page of links that would handily point to different parts of the module or feed those links into a sitemap. This meant that I wouldn't need to hard code this list into a controller, I just needed to load all the routes and print that list out instead. Especially handy if I ever added or removed a route as that would mean that list would update without me having to do it manually. Using Core Services As it happens, Drupal doesn't have a service that allows you to search for routes that have a similar signature or structure. There are a couple of things that look like they might work, but end up not being what I was looking for. I'll go through them here for completeness. The first option I found was the getRouteByName() method from the router.route_provider service. This does a one-to-one match of a given route against the routes you have within a site....
Chapter Three: Deploying an Ecosystem to Serve the Public: A Strategy for California’s Trial Courts
Overview We’ve been working over the last year to help the Judicial Council of California move the infrastructure and design of various California court sites (as we've said elsewhere, the California Judicial Branch is the largest legal system in the country). This ongoing effort is grounded by several desired outcomes:
Agiledrop.com Blog: Top Drupal blog posts from September 2021
September gave us a lot of interesting Drupal-related news and articles. Here’s our recap of some of our favorite posts. READ MORE
mcdruid.co.uk: Assessing the likelihood of a Drupal exploit of Ghostscript Zero Day CVE-2021-3781
My colleagues and I in the Drupal Security Team recently became aware of a Zero Day RCE vulnerability in Ghostscript. This was later assigned CVE-2021-3781. At least one viable Proof of Concept (PoC) was made public not long after the Zero Day which illustrated Scalable Vector Graphics (SVG) handling in Imagemagick being used as an attack vector. Drupal core doesn't use Ghostscript directly, but it's fairly common for Drupal sites to use Imagemagick in some form. As such, we began to look at how an attacker might try to exploit the Ghostscript vulnerability via SVG and Imagemagick on a Drupal site. Our goal in such an investigation is to determine whether it would be sufficiently easy, with a common Drupal configuration, that we ought to issue a Public Security Announcement (PSA) warning Drupal users and providing any mitigation steps they might be able to take until an upstream fix was available. Here's a quick write-up of some of the investigation I did. We'd determined that SVG is not in the default list of permitted image extensions in Drupal. However, the PoC write up showed Imagemagick being tricked into parsing an SVG with a fake jpg extension. I verified that in Drupal 9 the built-in file type detection prevented a malicious SVG from being smuggled into an upload with a permitted file extension. Drupal 7 core by itself doesn't have this protection, although modules are...
DrupalCon News: State of Drupal presentation at DrupalCon Europe
4-7 October, Drupalists around the world gathered virtually for DrupalCon Europe. As a DrupalCon tradition, Dries delivered his State of Drupal keynote.
Drupal blog: State of Drupal presentation (October 2021)
This blog has been re-posted and edited with permission from Dries Buytaert's blog. Last week, Drupalists around the world gathered virtually for DrupalCon Europe 2021. In good tradition, I delivered my State of Drupal keynote. You can watch the video of my keynote, download my slides (156 MB), or read the brief summary below. I talked about end-of-life schedules for various Drupal versions, delivered some exciting updates on Drupal 10 progress, and covered the health of the Drupal community in terms of contributor dynamics. Last but not least, I talked about how we are attracting new users and contributors by making it much easier to contribute to Drupal. Drupal 7 and Drupal 8 end-of-life If you are using Drupal 7 or Drupal 8, time is of the essence to upgrade to Drupal 9. Drupal 7 end-of-life is scheduled for November 2022. Drupal 8's end-of-life is more pressing, as it is scheduled for November 2nd, 2021 (i.e. in less than a month). If you are wondering why Drupal 8 is end-of-life before Drupal 7, that is because we changed how we develop Drupal in 2016. These changes have been really great for Drupal. They've made it much easier to upgrade to the latest version without friction. As a community, we've spent thousands of hours building tools and automations to make migrating to Drupal 9 as simple as possible. Drupal 10 timeline Next, I gave an update on Drupal 10 timelines...
Matt Glaman: phpstan-drupal 0.12.15: Improved detection of deprecated service usage
I have some exciting news to share for phpstan-drupal! With the 0.12.15 release, the ability to detect and report usages of deprecated services should have full coverage! Previously, phpstan-drupal only detected if you used a method on a deprecated service. And that happened to be if the service was fetched from an object implementing ContainerInterface. That meant calls to \Drupal::service were left uncovered – even though it calls self::getContainer->get() (I thought it would "just work," but it did not.)
Jacob Rockowitz: Asking the “Five Whys” about Open Source Sustainability at the Sustainability BoF @ NED Camp 2021
Why sustainability matters to meAs the maintainer of the Webform module for Drupal 9, I make sizable contributions to Drupal in a variety of ways: committing code, writing documentation, recording screencasts, wrangling the issue queue, and more…. Over the last five years, I’ve come to realize that figuring out how to make my contributions sustainable is essential.Sustainability has been a consistent theme in my blog. Last year, when it seemed that my organization was moving away from Drupal, I thought a lot about my commitment to Drupal and the sustainability of my work on the Webform module. This challenge encouraged me to improve the Webform module’s Open Collective. I worked to persuade individuals and organizations to invest (aka sponsor) in the ongoing maintenance of the Webform module. The number of backers and the annual budget of the Webform module’s Open Collective has grown substantially; for this, I am very grateful. Talking more about the Webform module and its Open Collective is a discussion for another day.Engaging in the more extensive discussion around sustainabilityRecently, John Picozzi (johnpicozzi) asked me to help facilitate the online Sustainability BoF at New England Drupal Camp (NEDCamp) on Friday, November 19th, 2021. I hesitated because I have mixed feelings about the topic. At the beginning of this blog post, I stated I...Read More
Dries Buytaert: State of Drupal presentation (October 2021)
Last week, Drupalists around the world gathered virtually for DrupalCon Europe 2021. In good tradition, I delivered my State of Drupal keynote. You can watch the video of my keynote, download my slides (156 MB), or read the brief summary below. I talked about end-of-life schedules for various Drupal versions, delivered some exciting updates on Drupal 10 progress, and covered the health of the Drupal community in terms of contributor dynamics. Last but not least, I talked about how we are attracting new users and contributors by making it much easier to contribute to Drupal. Drupal 7 and Drupal 8 end-of-life If you are using Drupal 7 or Drupal 8, time is of the essence to upgrade to Drupal 9. Drupal 7 end-of-life is scheduled for November 2022. Drupal 8's end-of-life is more pressing, as it is scheduled for November 2nd, 2021 (i.e. in less than a month). If you are wondering why Drupal 8 is end-of-life before Drupal 7, that is because we changed how we develop Drupal in 2016. These changes have been really great for Drupal. They've made it much easier to upgrade to the latest version without friction. As a community, we've spent thousands of hours building tools and automations to make migrating to Drupal 9 as simple as possible. Drupal 10 timeline Next, I gave an update on Drupal 10 timelines. Timing-wise, our preferred option would be to ship Drupal 10 in June 2022...
State of Drupal presentation (October 2021)
Last week, Drupalists around the world gathered virtually for DrupalCon Europe 2021. In good tradition, I delivered my State of Drupal keynote. You can watch the video of my keynote, download my slides (156 MB), or read the brief summary below. I talked about end-of-life schedules for various Drupal versions, delivered some exciting updates on Drupal 10 progress, and covered the health of the Drupal community in terms of contributor dynamics. Last but not least, I talked about how we are attracting new users and contributors by making it much easier to contribute to Drupal. Drupal 7 and Drupal 8 end-of-life If you are using Drupal 7 or Drupal 8, time is of the essence to upgrade to Drupal 9. Drupal 7 end-of-life is scheduled for November 2022. Drupal 8's end-of-life is more pressing, as it is scheduled for November 2nd, 2021 (i.e. in less than a month). If you are wondering why Drupal 8 is end-of-life before Drupal 7, that is because we changed how we develop Drupal in 2016. These changes have been really great for Drupal. They've made it much easier to upgrade to the latest version without friction. As a community, we've spent thousands of hours building tools and automations to make migrating to Drupal 9 as simple as possible. Drupal 10 timeline Next, I gave an update on Drupal 10 timelines. Timing-wise, our preferred option would be to ship Drupal 10 in June 2022...
robertroose.com: 27 more Drupal modules every Drupal professional should know about
Extending Drupal with modules is a great way to create a complex website. Here are 27 of my favourite Drupal modules.

Number of Total Worldwide Registered Domains Updated: Oct 25 2021