← all change records
#3591939 CSRF token validation with the 'rest' key is deprecated in Drupal 11.4.0 and removed in Drupal 12.0.0
Generated 2026-09-22 02:00 UTC
Matching rules (1)
- from:
arg: 0
fqn: '\Drupal\Core\Access\CsrfTokenGenerator::get'
string_in:
- rest
to:
arg: 0
const_in:
- '\Drupal\Core\Access\CsrfRequestHeaderAccessCheck::TOKEN_KEY'
fqn: '\Drupal\Core\Access\CsrfTokenGenerator::get'
Affected contrib projects (135)
| Project | legacy | in_flight | migrated | installs | files | adopters | |
|---|---|---|---|---|---|---|---|
| imce ↗ | 0 | 0 | 0 | 176,597 | 1 | 1 | |
| devel ↗ | 0 | 0 | 0 | 135,080 | 1 | 1 | |
| focal_point ↗ | 0 | 0 | 0 | 103,391 | 1 | 1 | |
| embed ↗ | 0 | 0 | 0 | 78,974 | 3 | 3 | |
| features ↗ | 0 | 0 | 0 | 76,062 | 1 | 1 | |
| entity_embed ↗ | 0 | 0 | 0 | 68,883 | 2 | 2 | |
| geolocation ↗ | 0 | 0 | 0 | 42,459 | 1 | 1 | |
| autologout ↗ | 0 | 0 | 0 | 41,237 | 2 | 2 | |
| plupload ↗ | 0 | 0 | 0 | 25,723 | 1 | 1 | |
| mailchimp ↗ | 0 | 0 | 0 | 23,849 | 1 | 1 | |
| email_registration ↗ | 5 | 0 | 0 | 23,433 | 1 | 1 | |
| fullcalendar_view ↗ | 0 | 0 | 0 | 22,100 | 2 | 2 | |
| acquia_connector ↗ | 0 | 0 | 0 | 18,367 | 1 | 1 | |
| ai ↗ | 0 | 0 | 0 | 17,818 | 1 | 1 | |
| login_emailusername ↗ | 8 | 0 | 0 | 15,795 | 1 | 1 | |
| content_lock ↗ | 0 | 0 | 0 | 15,367 | 1 | 1 | |
| jsonapi_resources ↗ | 0 | 0 | 7 | 8,529 | 1 | 1 | |
| canvas ↗ | 0 | 0 | 19 | 8,315 | 9 | 9 | |
| persistent_login ↗ | 0 | 0 | 0 | 6,496 | 1 | 1 | |
| media_directories ↗ | 0 | 0 | 0 | 5,699 | 1 | 1 | |
| gutenberg ↗ | 0 | 0 | 17 | 5,031 | 1 | 1 | |
| insert_block ↗ | 0 | 0 | 0 | 4,790 | 1 | 1 | |
| fullcalendar ↗ | 0 | 0 | 0 | 3,849 | 1 | 1 | |
| comment_notify ↗ | 0 | 0 | 0 | 3,749 | 4 | 4 | |
| db_maintenance ↗ | 0 | 0 | 0 | 3,375 | 1 | 1 | |
| markdown ↗ | 0 | 0 | 0 | 2,826 | 1 | 1 | |
| l10n_client ↗ | 0 | 0 | 0 | 2,617 | 1 | 1 | |
| privatemsg ↗ | 0 | 0 | 0 | 2,603 | 3 | 3 | |
| oauth2_client ↗ | 0 | 0 | 0 | 2,456 | 1 | 1 | |
| commerce_add_to_cart_link ↗ | 0 | 0 | 0 | 2,454 | 1 | 1 | |
| bueditor ↗ | 0 | 0 | 0 | 2,433 | 1 | 1 | |
| private_message ↗ | 0 | 0 | 0 | 2,385 | 4 | 4 | |
| entity_reference_tree ↗ | 0 | 0 | 0 | 2,090 | 3 | 3 | |
| homebox ↗ | 0 | 0 | 0 | 1,999 | 2 | 2 | |
| embedded_content ↗ | 0 | 0 | 0 | 1,735 | 1 | 1 | |
| commerce_square ↗ | 0 | 0 | 0 | 1,729 | 1 | 1 | |
| phone_number ↗ | 0 | 0 | 0 | 1,632 | 1 | 1 | |
| ckeditor_lts ↗ | 0 | 0 | 0 | 1,368 | 1 | 1 | |
| paragraphs_entity_embed ↗ | 0 | 0 | 0 | 1,366 | 2 | 2 | |
| acquia_dam ↗ | 0 | 0 | 0 | 1,343 | 5 | 5 | |
| entity_export_csv ↗ | 0 | 0 | 0 | 1,283 | 2 | 2 | |
| ckeditor5_embedded_content ↗ | 0 | 0 | 0 | 1,111 | 1 | 1 | |
| opigno_statistics ↗ | 0 | 0 | 0 | 979 | 2 | 2 | |
| dxpr_builder ↗ | 0 | 0 | 0 | 972 | 4 | 4 | |
| mobile_number ↗ | 0 | 0 | 0 | 885 | 2 | 2 | |
| opigno_social ↗ | 0 | 0 | 0 | 883 | 6 | 6 | |
| brightcove ↗ | 0 | 0 | 0 | 831 | 1 | 1 | |
| apigee_edge ↗ | 0 | 0 | 0 | 800 | 2 | 2 | |
| ai_seo ↗ | 0 | 0 | 0 | 797 | 2 | 2 | |
| acquia_contenthub ↗ | 92 | 0 | 0 | 651 | 3 | 3 | |
| miniorange_2fa ↗ | 0 | 0 | 0 | 637 | 2 | 2 | |
| commerce_avatax ↗ | 0 | 0 | 0 | 584 | 1 | 1 | |
| rest_password ↗ | 21 | 0 | 0 | 575 | 1 | 0 | |
| basket ↗ | 0 | 0 | 0 | 512 | 1 | 1 | |
| anonymous_token ↗ | 0 | 0 | 0 | 499 | 1 | 1 | |
| fullcalendar_dynamic ↗ | 0 | 0 | 0 | 482 | 1 | 1 | |
| hierarchy_manager ↗ | 0 | 0 | 0 | 477 | 2 | 2 | |
| canvas_override ↗ | 0 | 0 | 0 | 420 | 1 | 1 | |
| flowdrop ↗ | 12 | 0 | 0 | 368 | 1 | 1 | |
| media_acquiadam ↗ | 0 | 0 | 0 | 329 | 1 | 1 | |
| mongodb ↗ | 0 | 0 | 0 | 326 | 1 | 1 | |
| layout_builder_ipe ↗ | 0 | 0 | 0 | 306 | 2 | 2 | |
| entity_delete ↗ | 0 | 0 | 0 | 305 | 1 | 1 | |
| phonenumber ↗ | 0 | 0 | 0 | 296 | 2 | 2 | |
| lionbridge_translation_provider ↗ | 0 | 0 | 0 | 238 | 1 | 1 | |
| file_uploader ↗ | 0 | 0 | 0 | 211 | 1 | 1 | |
| flag_lists ↗ | 0 | 0 | 0 | 209 | 1 | 1 | |
| ck5_block_embed ↗ | 0 | 0 | 0 | 196 | 1 | 1 | |
| lms ↗ | 0 | 0 | 0 | 196 | 1 | 1 | |
| bot_blocker ↗ | 0 | 0 | 0 | 194 | 1 | 1 | |
| lingotek ↗ | 0 | 0 | 0 | 175 | 1 | 1 | |
| lupus_decoupled ↗ | 0 | 0 | 0 | 170 | 1 | 1 | |
| jsnlog ↗ | 0 | 0 | 0 | 125 | 3 | 3 | |
| instapage_cms_plugin ↗ | 0 | 0 | 0 | 119 | 1 | 1 | |
| drd ↗ | 0 | 0 | 0 | 115 | 1 | 1 | |
| etm ↗ | 0 | 0 | 0 | 94 | 2 | 2 | |
| ai_search_block ↗ | 0 | 0 | 0 | 91 | 1 | 1 | |
| rest_register_verify_email ↗ | 11 | 0 | 0 | 74 | 1 | 0 | |
| rest_mail_login ↗ | 3 | 0 | 0 | 68 | 1 | 0 | |
| dfm ↗ | 0 | 0 | 0 | 63 | 1 | 1 | |
| content_reporting ↗ | 0 | 0 | 0 | 62 | 1 | 1 | |
| magic_link ↗ | 0 | 0 | 0 | 60 | 1 | 1 | |
| permission_turbo ↗ | 0 | 0 | 0 | 59 | 2 | 2 | |
| webform_jsonschema ↗ | 0 | 0 | 10 | 59 | 0 | 1 | |
| logout_token ↗ | 0 | 0 | 0 | 58 | 1 | 1 | |
| onetimelogin ↗ | 0 | 0 | 0 | 58 | 2 | 2 | |
| quiz_maker ↗ | 0 | 0 | 1 | 56 | 0 | 1 | |
| element_embed ↗ | 0 | 0 | 0 | 47 | 1 | 1 | |
| dlf_aim_3d_viewer ↗ | 0 | 0 | 0 | 40 | 1 | 1 | |
| debug_bar ↗ | 0 | 0 | 0 | 39 | 2 | 2 | |
| dblog_ban ↗ | 0 | 0 | 0 | 36 | 1 | 1 | |
| firebase_ui ↗ | 0 | 0 | 0 | 27 | 1 | 1 | |
| action_link ↗ | 0 | 0 | 0 | 25 | 1 | 1 | |
| social_auth_decoupled ↗ | 14 | 0 | 0 | 23 | 2 | 0 | |
| monster_menus ↗ | 0 | 0 | 0 | 21 | 3 | 3 | |
| simpleavs ↗ | 0 | 1 | 0 | 21 | 1 | 1 | |
| private_message_windows ↗ | 0 | 0 | 0 | 20 | 1 | 1 | |
| noahs ↗ | 0 | 0 | 0 | 19 | 2 | 2 | |
| swagger_ui_info ↗ | 1 | 0 | 0 | 18 | 1 | 0 | |
| kontainer ↗ | 0 | 0 | 0 | 17 | 2 | 2 | |
| ck5_column_layout ↗ | 0 | 0 | 0 | 15 | 1 | 1 | |
| hax ↗ | 0 | 0 | 0 | 14 | 2 | 2 | |
| batch_jobs ↗ | 0 | 0 | 0 | 13 | 3 | 3 | |
| image_to_media_swapper ↗ | 0 | 0 | 0 | 12 | 1 | 1 | |
| autoalt ↗ | 0 | 0 | 0 | 11 | 1 | 1 | |
| migrate_generator ↗ | 0 | 0 | 0 | 9 | 1 | 1 | |
| commerce_single_store_cart ↗ | 0 | 0 | 0 | 8 | 2 | 2 | |
| dl ↗ | 0 | 0 | 0 | 8 | 1 | 1 | |
| payment_saferpay ↗ | 0 | 0 | 0 | 8 | 1 | 1 | |
| prosemirror ↗ | 0 | 0 | 0 | 8 | 1 | 1 | |
| cl_block ↗ | 0 | 0 | 0 | 7 | 1 | 1 | |
| external_media_focal_point ↗ | 0 | 0 | 0 | 7 | 1 | 1 | |
| experience_builder ↗ | 0 | 0 | 10 | 6 | 3 | 3 | |
| posse_post ↗ | 0 | 0 | 0 | 6 | 2 | 2 | |
| one_time_login_rest ↗ | 2 | 0 | 0 | 5 | 1 | 1 | |
| quick_node_status_toggler ↗ | 0 | 0 | 0 | 5 | 1 | 1 | |
| csrf_anonymous_token ↗ | 0 | 0 | 0 | 4 | 1 | 1 | |
| micro_sso ↗ | 0 | 0 | 0 | 3 | 1 | 1 | |
| minikanban ↗ | 0 | 0 | 0 | 3 | 1 | 1 | |
| mobile_number_login_otp ↗ | 6 | 0 | 0 | 3 | 1 | 1 | |
| ai_alt_text_alttextlab ↗ | 0 | 0 | 0 | 2 | 1 | 1 | |
| ckeditor_taxonomy_glossary ↗ | 0 | 0 | 1 | 2 | 1 | 1 | |
| contextly ↗ | 0 | 0 | 0 | 2 | 2 | 2 | |
| ffmpeg_media ↗ | 0 | 0 | 0 | 2 | 1 | 1 | |
| field_style ↗ | 0 | 0 | 0 | 2 | 1 | 1 | |
| knowledge ↗ | 0 | 0 | 0 | 2 | 1 | 1 | |
| ai_eval ↗ | 0 | 0 | 0 | 1 | 9 | 9 | |
| knova ↗ | 0 | 0 | 0 | 1 | 2 | 2 | |
| pb_localizer ↗ | 0 | 0 | 0 | 1 | 1 | 1 | |
| sdx_aurora ↗ | 2 | 0 | 0 | 1 | 1 | 0 | |
| tapis_app_webform ↗ | 0 | 0 | 1 | 1 | 0 | 1 | |
| ai_plus ↗ | 0 | 0 | 0 | 0 | 1 | 1 | |
| api_insight_lab ↗ | 3 | 0 | 0 | 0 | 2 | 2 | |
| drupalorg ↗ | 0 | 0 | 0 | 0 | 1 | 1 | |
| eb ↗ | 0 | 0 | 2 | 0 | 1 | 1 |