Posted by mkmagu on January 9, 2021 at 6:53am
Hi Everyone,
I took a hiatus from Drupal for a couple of years and now I'm back to building a web site on Drupal 9. I purchased a theme for my site and one of the modules it uses better exposed filters. Since I'm using D9 I have to upgrade to 8.x-5.0-beta1 which requires jQuery UI Touch Punch as a dependency module. From what I can find this was in core in D8 but has been removed due to security issues with it. The module page for Touch Punch does not meet Drupal Security. Is anyone familiar with this module and if so do you feel it's safe? I'm a little confused on how the updated version of better filters can meet drupal security when it has a dependent module that does not meet it. TIA.
Mary
Comments
Welcome back :) If you look
Welcome back :)
If you look at the 8.x-4.x and 8.x-5.x releases of BEF, they are still only have beta releases, therefore they are not included in the security advisory process.
Thanks Damien, I was almost
Thanks Damien,
I was almost afraid to install Drupal 9 since I have not touched 8 and only maintained a 7 site off and on. 9 doesn't look that intimidating but I'm sure there is a lot to learn about it. Since I was laid off I figured I can use the time to brush up on some skills. Are you still in Keene? I'm enjoying Washington state average snow fall where I live is 6 inches. If I really want snow just have to drive about 20 miles east.
Mary
Mary M.