Issue 376 - February, 21st 2019

News

Drupal Core - Highly Critical - Remote Code Execution - SA-CORE-2019-003

"Some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases." Please read the full page on this and determine if you need to update your site immediately.

Keeping Up to Date with Information for Drupal Event Organizers

A must read for any event organizer, from the Drupal Association blog.

From Our Sponsor

Articles

The State of GraphQL in Drupal

A response to Dries post from last week about REST, JSON:API and GraphQL.

A Glimpse at Drupal 8 and Vue.js Combination

Devshop as a Cloud Hosting Platform

Drupal 8 Commerce Performance Benchmarks

Curious about Drupal Commerce performance and scale? Check out this report from Acro Media.

Tired of Emergency Drupal Security Updates Yet? (They're Never Going to Stop!)

You run a Drupal Agency - or you're an independent Drupal Developer. Did you have to drop everything for the security update yesterday? Don't you have project deadlines to meet? Why deal with that frustration and anxiety?

Flexible Authoring with Structured Content

Going Ultra-Minimalist: Metalsmith with Drupal

GatsbyJS isn't the only static site generator in town.

Optimizing Site Performance by Reducing JavaScript and CSS

Tutorials

Build and Manage Online Donations in Drupal with the Give Module

Drupal on OpenShift: Enhancing the Developer Experience

Take Control of Your Drupal 8 Theming with DX8.

Our low-code platform enables junior site builders to complete 100% of the theming of your Drupal 8 websites without involving developers who focus on more complex tasks. Features: In-line editing, drag & drop page builder, style builder, settings manager, template builder and import/export so you can build once use everywhere. Get access to our fully featured demo and see for yourself.

Easy Way to Find the Drush Command You Are Looking For

Another useful tutorial from Blair Wadman. Concise and well written.

Getting Started with ReactJS & Drupal (Fully-Decoupled)

How to Import Config Without Losing Changes

Projects

Introducing the Quicklink Module for Drupal

Quicklink is a small (less than 1kb compressed) JavaScript library that “attempts to make navigations to subsequent pages load faster.”

Launching Pino: A Drupal 8 Distribution for Member Management

Releases

Drupal 8.6.10

"This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement and notes."

Drupal 8.5.11

"This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement and notes."

Jsonapi 8.x-2.3

"This resolves issues described in SA-CORE-2019-003 for this module."

Jsonapi 8.x-1.25

"This resolves issues described in SA-CORE-2019-003 for this module."

Link 7.x-1.6

"This resolves issues described in SA-CORE-2019-003 for this module."

Metatag 8.x-1.8

"This resolves issues described in SA-CORE-2019-003 for this module."

Paragraphs 8.x-1.6

"This resolves issues described in SA-CORE-2019-003 for this module."

Restws 7.x-2.8

"This resolves issues described in SA-CORE-2019-003 for this module."

Video 8.x-1.4

"This resolves issues described in SA-CORE-2019-003 for this module."

build_hooks 8.x-2.0-Beta2

decoupled_router 8.x-1.5

entity_browser 8.x-1.7

entity_browser 8.x-2.1

entity_clone 8.x-1.0-Beta2

jsonapi_extras 8.x-3.4

Lando v3.0.0-rc.10

Prepopulate 8.x-2.0

queue_unique 8.x-2.0

Quicklink 8.x-1.0-Beta1

reroute_email 8.x-1.1

Restful 7.x-1.9

search_api_solr 8.x-2.6

Simpleautologout 8.x-1.4