← all change records
#3591939 CSRF token validation with the 'rest' key is deprecated in Drupal 11.4.0 and removed in Drupal 12.0.0
Generated 2026-09-22 14:00 UTC
Matching rules (1)
- from:
arg: 0
fqn: '\Drupal\Core\Access\CsrfTokenGenerator::get'
string_in:
- rest
to:
arg: 0
const_in:
- '\Drupal\Core\Access\CsrfRequestHeaderAccessCheck::TOKEN_KEY'
fqn: '\Drupal\Core\Access\CsrfTokenGenerator::get'
Affected contrib projects (135)
| Project | legacy | in_flight | migrated | installs | files | adopters | |
|---|---|---|---|---|---|---|---|
| imce ↗ | 0 | 0 | 0 | 176,597 | 1 | 1 | |
| devel ↗ | 0 | 0 | 0 | 135,080 | 1 | 1 | |
| focal_point ↗ | 0 | 0 | 0 | 103,391 | 1 | 1 | |
| embed ↗ | 0 | 0 | 0 | 78,974 | 3 | 3 | |
| features ↗ | 0 | 0 | 0 | 76,062 | 1 | 1 | |
| entity_embed ↗ | 0 | 0 | 0 | 68,883 | 2 | 2 | |
| geolocation ↗ | 0 | 0 | 0 | 42,459 | 1 | 1 | |
| autologout ↗ | 0 | 0 | 0 | 40,649 | 2 | 2 | |
| plupload ↗ | 0 | 0 | 0 | 25,542 | 1 | 1 | |
| mailchimp ↗ | 0 | 0 | 0 | 24,179 | 1 | 1 | |
| email_registration ↗ | 5 | 0 | 0 | 22,845 | 1 | 1 | |
| fullcalendar_view ↗ | 0 | 0 | 0 | 22,100 | 2 | 2 | |
| acquia_connector ↗ | 0 | 0 | 0 | 18,367 | 1 | 1 | |
| ai ↗ | 0 | 0 | 0 | 17,818 | 1 | 1 | |
| login_emailusername ↗ | 8 | 0 | 0 | 17,212 | 1 | 1 | |
| content_lock ↗ | 0 | 0 | 0 | 15,367 | 1 | 1 | |
| jsonapi_resources ↗ | 0 | 0 | 7 | 9,279 | 1 | 1 | |
| canvas ↗ | 0 | 0 | 19 | 8,315 | 9 | 9 | |
| persistent_login ↗ | 0 | 0 | 0 | 6,699 | 1 | 1 | |
| media_directories ↗ | 0 | 0 | 0 | 5,699 | 1 | 1 | |
| gutenberg ↗ | 0 | 0 | 17 | 5,031 | 1 | 1 | |
| insert_block ↗ | 0 | 0 | 0 | 4,607 | 1 | 1 | |
| fullcalendar ↗ | 0 | 0 | 0 | 3,870 | 1 | 1 | |
| comment_notify ↗ | 0 | 0 | 0 | 3,431 | 4 | 4 | |
| db_maintenance ↗ | 0 | 0 | 0 | 3,348 | 1 | 1 | |
| markdown ↗ | 0 | 0 | 0 | 2,826 | 1 | 1 | |
| oauth2_client ↗ | 0 | 0 | 0 | 2,679 | 1 | 1 | |
| l10n_client ↗ | 0 | 0 | 0 | 2,608 | 1 | 1 | |
| privatemsg ↗ | 0 | 0 | 0 | 2,603 | 3 | 3 | |
| bueditor ↗ | 0 | 0 | 0 | 2,463 | 1 | 1 | |
| private_message ↗ | 0 | 0 | 0 | 2,385 | 4 | 4 | |
| commerce_add_to_cart_link ↗ | 0 | 0 | 0 | 2,360 | 1 | 1 | |
| entity_reference_tree ↗ | 0 | 0 | 0 | 2,134 | 3 | 3 | |
| homebox ↗ | 0 | 0 | 0 | 1,999 | 2 | 2 | |
| embedded_content ↗ | 0 | 0 | 0 | 1,778 | 1 | 1 | |
| phone_number ↗ | 0 | 0 | 0 | 1,702 | 1 | 1 | |
| commerce_square ↗ | 0 | 0 | 0 | 1,606 | 1 | 1 | |
| acquia_dam ↗ | 0 | 0 | 0 | 1,430 | 5 | 5 | |
| paragraphs_entity_embed ↗ | 0 | 0 | 0 | 1,366 | 2 | 2 | |
| ckeditor_lts ↗ | 0 | 0 | 0 | 1,362 | 1 | 1 | |
| opigno_statistics ↗ | 0 | 0 | 0 | 1,330 | 2 | 2 | |
| entity_export_csv ↗ | 0 | 0 | 0 | 1,278 | 2 | 2 | |
| opigno_social ↗ | 0 | 0 | 0 | 1,231 | 6 | 6 | |
| ckeditor5_embedded_content ↗ | 0 | 0 | 0 | 1,111 | 1 | 1 | |
| dxpr_builder ↗ | 0 | 0 | 0 | 949 | 4 | 4 | |
| mobile_number ↗ | 0 | 0 | 0 | 884 | 2 | 2 | |
| brightcove ↗ | 0 | 0 | 0 | 860 | 1 | 1 | |
| ai_seo ↗ | 0 | 0 | 0 | 794 | 2 | 2 | |
| apigee_edge ↗ | 0 | 0 | 0 | 784 | 2 | 2 | |
| miniorange_2fa ↗ | 0 | 0 | 0 | 684 | 2 | 2 | |
| acquia_contenthub ↗ | 92 | 0 | 0 | 681 | 3 | 3 | |
| commerce_avatax ↗ | 0 | 0 | 0 | 602 | 1 | 1 | |
| rest_password ↗ | 21 | 0 | 0 | 565 | 1 | 0 | |
| basket ↗ | 0 | 0 | 0 | 519 | 1 | 1 | |
| anonymous_token ↗ | 0 | 0 | 0 | 515 | 1 | 1 | |
| fullcalendar_dynamic ↗ | 0 | 0 | 0 | 483 | 1 | 1 | |
| hierarchy_manager ↗ | 0 | 0 | 0 | 467 | 2 | 2 | |
| media_acquiadam ↗ | 0 | 0 | 0 | 391 | 1 | 1 | |
| flowdrop ↗ | 12 | 0 | 0 | 368 | 1 | 1 | |
| mongodb ↗ | 0 | 0 | 0 | 326 | 1 | 1 | |
| entity_delete ↗ | 0 | 0 | 0 | 311 | 1 | 1 | |
| file_uploader ↗ | 0 | 0 | 0 | 292 | 1 | 1 | |
| phonenumber ↗ | 0 | 0 | 0 | 281 | 2 | 2 | |
| lionbridge_translation_provider ↗ | 0 | 0 | 0 | 239 | 1 | 1 | |
| canvas_override ↗ | 0 | 0 | 0 | 229 | 1 | 1 | |
| layout_builder_ipe ↗ | 0 | 0 | 0 | 220 | 2 | 2 | |
| bot_blocker ↗ | 0 | 0 | 0 | 208 | 1 | 1 | |
| lms ↗ | 0 | 0 | 0 | 208 | 1 | 1 | |
| flag_lists ↗ | 0 | 0 | 0 | 200 | 1 | 1 | |
| ck5_block_embed ↗ | 0 | 0 | 0 | 188 | 1 | 1 | |
| lingotek ↗ | 0 | 0 | 0 | 175 | 1 | 1 | |
| lupus_decoupled ↗ | 0 | 0 | 0 | 169 | 1 | 1 | |
| instapage_cms_plugin ↗ | 0 | 0 | 0 | 120 | 1 | 1 | |
| drd ↗ | 0 | 0 | 0 | 115 | 1 | 1 | |
| ai_search_block ↗ | 0 | 0 | 0 | 108 | 1 | 1 | |
| etm ↗ | 0 | 0 | 0 | 102 | 2 | 2 | |
| jsnlog ↗ | 0 | 0 | 0 | 76 | 3 | 3 | |
| magic_link ↗ | 0 | 0 | 0 | 76 | 1 | 1 | |
| rest_register_verify_email ↗ | 11 | 0 | 0 | 76 | 1 | 0 | |
| webform_jsonschema ↗ | 0 | 0 | 10 | 71 | 0 | 1 | |
| onetimelogin ↗ | 0 | 0 | 0 | 68 | 2 | 2 | |
| permission_turbo ↗ | 0 | 0 | 0 | 68 | 2 | 2 | |
| content_reporting ↗ | 0 | 0 | 0 | 62 | 1 | 1 | |
| rest_mail_login ↗ | 3 | 0 | 0 | 61 | 1 | 0 | |
| logout_token ↗ | 0 | 0 | 0 | 58 | 1 | 1 | |
| dfm ↗ | 0 | 0 | 0 | 56 | 1 | 1 | |
| quiz_maker ↗ | 0 | 0 | 1 | 55 | 0 | 1 | |
| element_embed ↗ | 0 | 0 | 0 | 50 | 1 | 1 | |
| debug_bar ↗ | 0 | 0 | 0 | 42 | 2 | 2 | |
| dlf_aim_3d_viewer ↗ | 0 | 0 | 0 | 42 | 1 | 1 | |
| dblog_ban ↗ | 0 | 0 | 0 | 41 | 1 | 1 | |
| ck5_column_layout ↗ | 0 | 0 | 0 | 39 | 1 | 1 | |
| firebase_ui ↗ | 0 | 0 | 0 | 32 | 1 | 1 | |
| private_message_windows ↗ | 0 | 0 | 0 | 26 | 1 | 1 | |
| swagger_ui_info ↗ | 1 | 0 | 0 | 24 | 1 | 0 | |
| social_auth_decoupled ↗ | 14 | 0 | 0 | 23 | 2 | 0 | |
| action_link ↗ | 0 | 0 | 0 | 22 | 1 | 1 | |
| kontainer ↗ | 0 | 0 | 0 | 19 | 2 | 2 | |
| simpleavs ↗ | 0 | 1 | 0 | 18 | 1 | 1 | |
| noahs ↗ | 0 | 0 | 0 | 17 | 2 | 2 | |
| autoalt ↗ | 0 | 0 | 0 | 16 | 1 | 1 | |
| monster_menus ↗ | 0 | 0 | 0 | 14 | 3 | 3 | |
| batch_jobs ↗ | 0 | 0 | 0 | 13 | 3 | 3 | |
| hax ↗ | 0 | 0 | 0 | 12 | 2 | 2 | |
| image_to_media_swapper ↗ | 0 | 0 | 0 | 12 | 1 | 1 | |
| commerce_single_store_cart ↗ | 0 | 0 | 0 | 11 | 2 | 2 | |
| dl ↗ | 0 | 0 | 0 | 10 | 1 | 1 | |
| migrate_generator ↗ | 0 | 0 | 0 | 9 | 1 | 1 | |
| experience_builder ↗ | 0 | 0 | 10 | 8 | 3 | 3 | |
| payment_saferpay ↗ | 0 | 0 | 0 | 8 | 1 | 1 | |
| external_media_focal_point ↗ | 0 | 0 | 0 | 7 | 1 | 1 | |
| one_time_login_rest ↗ | 2 | 0 | 0 | 7 | 1 | 1 | |
| csrf_anonymous_token ↗ | 0 | 0 | 0 | 6 | 1 | 1 | |
| minikanban ↗ | 0 | 0 | 0 | 6 | 1 | 1 | |
| prosemirror ↗ | 0 | 0 | 0 | 6 | 1 | 1 | |
| quick_node_status_toggler ↗ | 0 | 0 | 0 | 6 | 1 | 1 | |
| cl_block ↗ | 0 | 0 | 0 | 5 | 1 | 1 | |
| posse_post ↗ | 0 | 0 | 0 | 5 | 2 | 2 | |
| pb_localizer ↗ | 0 | 0 | 0 | 4 | 1 | 1 | |
| ckeditor_taxonomy_glossary ↗ | 0 | 0 | 1 | 3 | 1 | 1 | |
| micro_sso ↗ | 0 | 0 | 0 | 3 | 1 | 1 | |
| mobile_number_login_otp ↗ | 6 | 0 | 0 | 3 | 1 | 1 | |
| ai_alt_text_alttextlab ↗ | 0 | 0 | 0 | 2 | 1 | 1 | |
| contextly ↗ | 0 | 0 | 0 | 2 | 2 | 2 | |
| ffmpeg_media ↗ | 0 | 0 | 0 | 2 | 1 | 1 | |
| field_style ↗ | 0 | 0 | 0 | 2 | 1 | 1 | |
| knova ↗ | 0 | 0 | 0 | 2 | 2 | 2 | |
| knowledge ↗ | 0 | 0 | 0 | 2 | 1 | 1 | |
| ai_eval ↗ | 0 | 0 | 0 | 1 | 9 | 9 | |
| ai_plus ↗ | 0 | 0 | 0 | 1 | 1 | 1 | |
| drupalorg ↗ | 0 | 0 | 0 | 1 | 1 | 1 | |
| eb ↗ | 0 | 0 | 2 | 1 | 1 | 1 | |
| sdx_aurora ↗ | 2 | 0 | 0 | 1 | 1 | 0 | |
| tapis_app_webform ↗ | 0 | 0 | 1 | 1 | 0 | 1 | |
| api_insight_lab ↗ | 3 | 0 | 0 | 0 | 2 | 2 |