← all change records

#3591939 CSRF token validation with the 'rest' key is deprecated in Drupal 11.4.0 and removed in Drupal 12.0.0

break Target 11.4.x Published 2026-06-12
#3585891

Generated 2026-09-22 02:00 UTC

Matching rules (1)

  • from: arg: 0 fqn: '\Drupal\Core\Access\CsrfTokenGenerator::get' string_in: - rest to: arg: 0 const_in: - '\Drupal\Core\Access\CsrfRequestHeaderAccessCheck::TOKEN_KEY' fqn: '\Drupal\Core\Access\CsrfTokenGenerator::get'

Affected contrib projects (135)

Project legacy in_flight migrated installs files adopters
imce 0 0 0 176,597 1 1
devel 0 0 0 135,080 1 1
focal_point 0 0 0 103,391 1 1
embed 0 0 0 78,974 3 3
features 0 0 0 76,062 1 1
entity_embed 0 0 0 68,883 2 2
geolocation 0 0 0 42,459 1 1
autologout 0 0 0 41,237 2 2
plupload 0 0 0 25,723 1 1
mailchimp 0 0 0 23,849 1 1
email_registration 5 0 0 23,433 1 1
fullcalendar_view 0 0 0 22,100 2 2
acquia_connector 0 0 0 18,367 1 1
ai 0 0 0 17,818 1 1
login_emailusername 8 0 0 15,795 1 1
content_lock 0 0 0 15,367 1 1
jsonapi_resources 0 0 7 8,529 1 1
canvas 0 0 19 8,315 9 9
persistent_login 0 0 0 6,496 1 1
media_directories 0 0 0 5,699 1 1
gutenberg 0 0 17 5,031 1 1
insert_block 0 0 0 4,790 1 1
fullcalendar 0 0 0 3,849 1 1
comment_notify 0 0 0 3,749 4 4
db_maintenance 0 0 0 3,375 1 1
markdown 0 0 0 2,826 1 1
l10n_client 0 0 0 2,617 1 1
privatemsg 0 0 0 2,603 3 3
oauth2_client 0 0 0 2,456 1 1
commerce_add_to_cart_link 0 0 0 2,454 1 1
bueditor 0 0 0 2,433 1 1
private_message 0 0 0 2,385 4 4
entity_reference_tree 0 0 0 2,090 3 3
homebox 0 0 0 1,999 2 2
embedded_content 0 0 0 1,735 1 1
commerce_square 0 0 0 1,729 1 1
phone_number 0 0 0 1,632 1 1
ckeditor_lts 0 0 0 1,368 1 1
paragraphs_entity_embed 0 0 0 1,366 2 2
acquia_dam 0 0 0 1,343 5 5
entity_export_csv 0 0 0 1,283 2 2
ckeditor5_embedded_content 0 0 0 1,111 1 1
opigno_statistics 0 0 0 979 2 2
dxpr_builder 0 0 0 972 4 4
mobile_number 0 0 0 885 2 2
opigno_social 0 0 0 883 6 6
brightcove 0 0 0 831 1 1
apigee_edge 0 0 0 800 2 2
ai_seo 0 0 0 797 2 2
acquia_contenthub 92 0 0 651 3 3
miniorange_2fa 0 0 0 637 2 2
commerce_avatax 0 0 0 584 1 1
rest_password 21 0 0 575 1 0
basket 0 0 0 512 1 1
anonymous_token 0 0 0 499 1 1
fullcalendar_dynamic 0 0 0 482 1 1
hierarchy_manager 0 0 0 477 2 2
canvas_override 0 0 0 420 1 1
flowdrop 12 0 0 368 1 1
media_acquiadam 0 0 0 329 1 1
mongodb 0 0 0 326 1 1
layout_builder_ipe 0 0 0 306 2 2
entity_delete 0 0 0 305 1 1
phonenumber 0 0 0 296 2 2
lionbridge_translation_provider 0 0 0 238 1 1
file_uploader 0 0 0 211 1 1
flag_lists 0 0 0 209 1 1
ck5_block_embed 0 0 0 196 1 1
lms 0 0 0 196 1 1
bot_blocker 0 0 0 194 1 1
lingotek 0 0 0 175 1 1
lupus_decoupled 0 0 0 170 1 1
jsnlog 0 0 0 125 3 3
instapage_cms_plugin 0 0 0 119 1 1
drd 0 0 0 115 1 1
etm 0 0 0 94 2 2
ai_search_block 0 0 0 91 1 1
rest_register_verify_email 11 0 0 74 1 0
rest_mail_login 3 0 0 68 1 0
dfm 0 0 0 63 1 1
content_reporting 0 0 0 62 1 1
magic_link 0 0 0 60 1 1
permission_turbo 0 0 0 59 2 2
webform_jsonschema 0 0 10 59 0 1
logout_token 0 0 0 58 1 1
onetimelogin 0 0 0 58 2 2
quiz_maker 0 0 1 56 0 1
element_embed 0 0 0 47 1 1
dlf_aim_3d_viewer 0 0 0 40 1 1
debug_bar 0 0 0 39 2 2
dblog_ban 0 0 0 36 1 1
firebase_ui 0 0 0 27 1 1
action_link 0 0 0 25 1 1
social_auth_decoupled 14 0 0 23 2 0
monster_menus 0 0 0 21 3 3
simpleavs 0 1 0 21 1 1
private_message_windows 0 0 0 20 1 1
noahs 0 0 0 19 2 2
swagger_ui_info 1 0 0 18 1 0
kontainer 0 0 0 17 2 2
ck5_column_layout 0 0 0 15 1 1
hax 0 0 0 14 2 2
batch_jobs 0 0 0 13 3 3
image_to_media_swapper 0 0 0 12 1 1
autoalt 0 0 0 11 1 1
migrate_generator 0 0 0 9 1 1
commerce_single_store_cart 0 0 0 8 2 2
dl 0 0 0 8 1 1
payment_saferpay 0 0 0 8 1 1
prosemirror 0 0 0 8 1 1
cl_block 0 0 0 7 1 1
external_media_focal_point 0 0 0 7 1 1
experience_builder 0 0 10 6 3 3
posse_post 0 0 0 6 2 2
one_time_login_rest 2 0 0 5 1 1
quick_node_status_toggler 0 0 0 5 1 1
csrf_anonymous_token 0 0 0 4 1 1
micro_sso 0 0 0 3 1 1
minikanban 0 0 0 3 1 1
mobile_number_login_otp 6 0 0 3 1 1
ai_alt_text_alttextlab 0 0 0 2 1 1
ckeditor_taxonomy_glossary 0 0 1 2 1 1
contextly 0 0 0 2 2 2
ffmpeg_media 0 0 0 2 1 1
field_style 0 0 0 2 1 1
knowledge 0 0 0 2 1 1
ai_eval 0 0 0 1 9 9
knova 0 0 0 1 2 2
pb_localizer 0 0 0 1 1 1
sdx_aurora 2 0 0 1 1 0
tapis_app_webform 0 0 1 1 0 1
ai_plus 0 0 0 0 1 1
api_insight_lab 3 0 0 0 2 2
drupalorg 0 0 0 0 1 1
eb 0 0 2 0 1 1