Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
D
drupal
Manage
Activity
Members
Labels
Plan
Wiki
Custom issue tracker
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Locked files
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Model registry
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Code review analytics
Insights
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
project
drupal
Commits
0c2af95f
Commit
0c2af95f
authored
1 year ago
by
catch
Browse files
Options
Downloads
Patches
Plain Diff
Issue
#3437514
by kim.pepper, alexpott: Deprecate hook_file_validate() API docs
parent
557fe765
Branches
Branches containing commit
Tags
Tags containing commit
Loading
Checking pipeline status
Changes
1
Pipelines
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
core/modules/file/file.api.php
+11
-6
11 additions, 6 deletions
core/modules/file/file.api.php
with
11 additions
and
6 deletions
core/modules/file/file.api.php
+
11
−
6
View file @
0c2af95f
...
...
@@ -15,7 +15,7 @@
* Using \Drupal\file\Element\ManagedFile field with a defined list of allowed
* extensions is best way to provide a file upload field. It will ensure that:
* - File names are sanitized by the FileUploadSanitizeNameEvent event.
* - Files are validated by
hook implementations of hook_f
ile
_v
alidate().
* - Files are validated by
\Drupal\file\Validation\F
ile
V
alidat
orInterfac
e().
* - Files with insecure extensions will be blocked by default even if they are
* listed. If .txt is an allowed extension such files will be renamed.
*
...
...
@@ -27,14 +27,15 @@
* '#type' => 'file',
* '#title' => $this->t('Upload file'),
* '#upload_validators' => [
* 'file_validate_extensions' => [
* 'png gif jpg',
* 'FileExtension' => [
* 'extensions' => 'png gif jpg',
* ],
* ],
* ],
* ];
* @endcode
* - Use file_save_upload() to trigger the FileUploadSanitizeNameEvent event and
*
hook_file_
validate().
*
\Drupal\file\Validation\FileValidatorInterface::
validate().
*
* Important considerations, regardless of the form element used:
* - Always use and validate against a list of allowed extensions.
...
...
@@ -43,7 +44,7 @@
* recommended.
*
* @see https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html
* @see \
hook_f
ile
_v
alidat
e()
* @see \
Drupal\file\Validation\F
ile
V
alidat
orInterface
* @see file_save_upload()
* @see \Drupal\Core\File\Event\FileUploadSanitizeNameEvent
* @see \Drupal\system\EventSubscriber\SecurityFileUploadEventSubscriber
...
...
@@ -71,7 +72,11 @@
* An array of error messages. If there are no problems with the file return
* an empty array.
*
* @see file_validate()
* @deprecated in drupal:10.2.0 and is removed from drupal:11.0.0. Use the
* 'file.validator' service instead.
*
* @see https://www.drupal.org/node/3363700
* @see \Drupal\file\Validation\FileValidatorInterface
*/
function
hook_file_validate
(
\Drupal\file\FileInterface
$file
)
{
$errors
=
[];
...
...
This diff is collapsed.
Click to expand it.
catch
@catch
mentioned in commit
371762de
·
1 year ago
mentioned in commit
371762de
mentioned in commit 371762dec0cbad4ff7e74cf61e154e217a6cfdbc
Toggle commit list
catch
@catch
mentioned in commit
5f6c6ec6
·
1 year ago
mentioned in commit
5f6c6ec6
mentioned in commit 5f6c6ec61766de5729c7ef28a752dbba779bea14
Toggle commit list
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment