diff --git a/core/includes/batch.inc b/core/includes/batch.inc
index b187dcd5170a6962db1b78f0f302ba68b60f4a71..3c80ee1d1db8dd1613949b63b932c1ec2b597d05 100644
--- a/core/includes/batch.inc
+++ b/core/includes/batch.inc
@@ -474,11 +474,14 @@ function _batch_finished() {
}
}
// Clean-up the session. Not needed for CLI updates.
- if (isset($_SESSION)) {
- unset($_SESSION['batches'][$batch['id']]);
- if (empty($_SESSION['batches'])) {
- unset($_SESSION['batches']);
- }
+ $session = \Drupal::request()->getSession();
+ $batches = $session->get('batches', []);
+ unset($batches[$batch['id']]);
+ if (empty($batches)) {
+ $session->remove('batches');
+ }
+ else {
+ $session->set('batches', $batches);
}
}
$_batch = $batch;
@@ -531,7 +534,8 @@ function _batch_finished() {
// form needs to be rebuilt, save the final $form_state for
// \Drupal\Core\Form\FormBuilderInterface::buildForm().
if ($_batch['form_state']->isRebuilding()) {
- $_SESSION['batch_form_state'] = $_batch['form_state'];
+ $session = \Drupal::request()->getSession();
+ $session->set('batch_form_state', $_batch['form_state']);
}
$callback = $_batch['redirect_callback'];
$_batch['source_url']->mergeOptions(['query' => ['op' => 'finish', 'id' => $_batch['id']]]);
diff --git a/core/includes/form.inc b/core/includes/form.inc
index 80a04c2cbcec4d483c6fea44c7f32734334ed60f..6f1025e61f9e97e20ef564a96587e6e4ce4c6680 100644
--- a/core/includes/form.inc
+++ b/core/includes/form.inc
@@ -612,7 +612,7 @@ function template_preprocess_form_element_label(&$variables) {
* // The following keys allow for multi-step operations :
* // 'sandbox' (read / write): An array that can be freely used to
* // store persistent data between iterations. It is recommended to
- * // use this instead of $_SESSION, which is unsafe if the user
+ * // use this instead of the session, which is unsafe if the user
* // continues browsing in a separate window while the batch is processing.
* // 'finished' (write): A float number between 0 and 1 informing
* // the processing engine of the completion level for the operation.
@@ -669,11 +669,12 @@ function template_preprocess_form_element_label(&$variables) {
* $message = t('Finished with an error.');
* }
* \Drupal::messenger()->addMessage($message);
- * // Providing data for the redirected page is done through $_SESSION.
+ * // Providing data for the redirected page is done through the session.
* foreach ($results as $result) {
* $items[] = t('Loaded node %title.', array('%title' => $result));
* }
- * $_SESSION['my_batch_results'] = $items;
+ * $session = \Drupal::getRequest()->getSession();
+ * $session->set('my_batch_results', $items);
* }
* @endcode
*/
@@ -718,7 +719,7 @@ function template_preprocess_form_element_label(&$variables) {
* - finished: Name of an implementation of callback_batch_finished(). This is
* executed after the batch has completed. This should be used to perform
* any result massaging that may be needed, and possibly save data in
- * $_SESSION for display after final page redirection.
+ * the session for display after final page redirection.
* - file: Path to the file containing the definitions of the 'operations' and
* 'finished' functions, for instance if they don't reside in the main
* .module file. The path should be relative to base_path(), and thus should
@@ -952,7 +953,10 @@ function batch_process($redirect = NULL, Url $url = NULL, $redirect_callback = N
\Drupal::service(BatchStorageInterface::class)->create($batch);
// Set the batch number in the session to guarantee that it will stay alive.
- $_SESSION['batches'][$batch['id']] = TRUE;
+ $session = \Drupal::request()->getSession();
+ $batches = $session->get('batches', []);
+ $batches[$batch['id']] = TRUE;
+ $session->set('batches', $batches);
// Redirect for processing.
$query_options = $error_url->getOption('query');
diff --git a/core/lib/Drupal/Core/Form/FormBuilder.php b/core/lib/Drupal/Core/Form/FormBuilder.php
index a379036cb4f3fd9992abbda35a79087d0b8dcd81..2331a59e1f4011232d42816707bc4fbabc8be88c 100644
--- a/core/lib/Drupal/Core/Form/FormBuilder.php
+++ b/core/lib/Drupal/Core/Form/FormBuilder.php
@@ -251,11 +251,13 @@ public function buildForm($form_arg, FormStateInterface &$form_state) {
$form_state->setUserInput($input);
}
- if (isset($_SESSION['batch_form_state'])) {
+ // @todo Remove hasSession() condition in https://www.drupal.org/i/3413153
+ if ($request->hasSession() && $request->getSession()->has('batch_form_state')) {
// We've been redirected here after a batch processing. The form has
// already been processed, but needs to be rebuilt. See _batch_finished().
- $form_state = $_SESSION['batch_form_state'];
- unset($_SESSION['batch_form_state']);
+ $session = $request->getSession();
+ $form_state = $session->get('batch_form_state');
+ $session->remove('batch_form_state');
return $this->rebuildForm($form_id, $form_state);
}
diff --git a/core/modules/big_pipe/tests/src/Functional/BigPipeTest.php b/core/modules/big_pipe/tests/src/Functional/BigPipeTest.php
index 59681f05c063fde352c910c755ca7cfc12892810..0c55b3884864540139e948bbeb9df986dea119cf 100644
--- a/core/modules/big_pipe/tests/src/Functional/BigPipeTest.php
+++ b/core/modules/big_pipe/tests/src/Functional/BigPipeTest.php
@@ -431,8 +431,23 @@ protected function assertBigPipePlaceholders(array $expected_big_pipe_placeholde
* Ensures CSRF tokens can be generated for the current user's session.
*/
protected function setCsrfTokenSeedInTestEnvironment() {
+ // Retrieve the CSRF token from the child site from its serialized session
+ // record in the database.
$session_data = $this->container->get('session_handler.write_safe')->read($this->getSession()->getCookie($this->getSessionName()));
$csrf_token_seed = unserialize(explode('_sf2_meta|', $session_data)[1])['s'];
+
+ // Ensure that the session is started before accessing a session bag.
+ // Otherwise the value stored in the bag is lost when subsequent session
+ // access triggers a session start automatically.
+
+ /** @var \Symfony\Component\HttpFoundation\RequestStack $request_stack */
+ $request_stack = $this->container->get('request_stack');
+ $session = $request_stack->getSession();
+ if (!$session->isStarted()) {
+ $session->start();
+ }
+
+ // Store the CSRF token in the test runners session metadata bag.
$this->container->get('session_manager.metadata_bag')->setCsrfTokenSeed($csrf_token_seed);
}
diff --git a/core/modules/language/src/Plugin/LanguageNegotiation/LanguageNegotiationSession.php b/core/modules/language/src/Plugin/LanguageNegotiation/LanguageNegotiationSession.php
index b17dd9dfa11e125422cd24970b18d87980104e2e..365cfced6f032c9c8f5f83e99c6ef799e2024a9b 100644
--- a/core/modules/language/src/Plugin/LanguageNegotiation/LanguageNegotiationSession.php
+++ b/core/modules/language/src/Plugin/LanguageNegotiation/LanguageNegotiationSession.php
@@ -88,9 +88,7 @@ public function getLangcode(Request $request = NULL) {
if ($request->query->has($param)) {
return $request->query->get($param);
}
- // @todo Remove hasSession() from condition in
- // https://www.drupal.org/node/2484991
- if ($request->hasSession() && $request->getSession()->has($param)) {
+ if ($request->getSession()->has($param)) {
return $request->getSession()->get($param);
}
}
diff --git a/core/modules/system/tests/modules/session_test/src/EventSubscriber/SessionTestSubscriber.php b/core/modules/system/tests/modules/session_test/src/EventSubscriber/SessionTestSubscriber.php
index 38b797a8a27d270eab61f6190fe81ecbd910a04d..35e491cfef1ad319a76fcbd43b2c6abc0a983761 100644
--- a/core/modules/system/tests/modules/session_test/src/EventSubscriber/SessionTestSubscriber.php
+++ b/core/modules/system/tests/modules/session_test/src/EventSubscriber/SessionTestSubscriber.php
@@ -13,7 +13,7 @@
class SessionTestSubscriber implements EventSubscriberInterface {
/**
- * Stores whether $_SESSION is empty at the beginning of the request.
+ * Stores whether the session is empty at the beginning of the request.
*
* @var bool
*/
diff --git a/core/modules/system/tests/src/Functional/Session/SessionTest.php b/core/modules/system/tests/src/Functional/Session/SessionTest.php
index 27e36f770d4174e401e24c08d8b9bb4f0afd7c00..fa3ad041985146c2cc5afcde1d9a38f2d89be5f2 100644
--- a/core/modules/system/tests/src/Functional/Session/SessionTest.php
+++ b/core/modules/system/tests/src/Functional/Session/SessionTest.php
@@ -403,7 +403,7 @@ public function assertSessionCookie(bool $sent): void {
}
/**
- * Assert whether $_SESSION is empty at the beginning of the request.
+ * Assert whether the session is empty at the beginning of the request.
*
* @internal
*/
diff --git a/core/modules/user/tests/src/Kernel/UserAccountFormPasswordResetTest.php b/core/modules/user/tests/src/Kernel/UserAccountFormPasswordResetTest.php
index 95bf84056da7a2bfca4356196abced03b6dce179..d122ebfa37e63555b3e26c1273a9d5599f75d21e 100644
--- a/core/modules/user/tests/src/Kernel/UserAccountFormPasswordResetTest.php
+++ b/core/modules/user/tests/src/Kernel/UserAccountFormPasswordResetTest.php
@@ -4,7 +4,6 @@
use Drupal\KernelTests\KernelTestBase;
use Drupal\user\Entity\User;
-use Symfony\Component\HttpFoundation\Session\Session;
/**
* Verifies that the password reset behaves as expected with form elements.
@@ -53,14 +52,8 @@ public function testPasswordResetToken() {
/** @var \Symfony\Component\HttpFoundation\Request $request */
$request = $this->container->get('request_stack')->getCurrentRequest();
- // @todo: Replace with $request->getSession() as soon as the session is
- // present in KernelTestBase.
- // see: https://www.drupal.org/node/2484991
- $session = new Session();
- $request->setSession($session);
-
$token = 'VALID_TOKEN';
- $session->set('pass_reset_1', $token);
+ $request->getSession()->set('pass_reset_1', $token);
// Set token in query string.
$request->query->set('pass-reset-token', $token);
diff --git a/core/tests/Drupal/Tests/Core/Form/FormBuilderTest.php b/core/tests/Drupal/Tests/Core/Form/FormBuilderTest.php
index f0b3425f5b86f92b8c2d7263bf052f17d02ec529..e3bd606f94a974967d59efa0da1ffdc3bba9717e 100644
--- a/core/tests/Drupal/Tests/Core/Form/FormBuilderTest.php
+++ b/core/tests/Drupal/Tests/Core/Form/FormBuilderTest.php
@@ -22,6 +22,8 @@
use Symfony\Component\DependencyInjection\ContainerInterface;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\RequestStack;
+use Symfony\Component\HttpFoundation\Session\Session;
+use Symfony\Component\HttpFoundation\Session\Storage\MockArraySessionStorage;
/**
* @coversDefaultClass \Drupal\Core\Form\FormBuilder
@@ -575,6 +577,7 @@ public function testFormCacheDeletionUncached() {
*/
public function testExceededFileSize() {
$request = new Request([FormBuilderInterface::AJAX_FORM_REQUEST => TRUE]);
+ $request->setSession(new Session(new MockArraySessionStorage()));
$request_stack = new RequestStack();
$request_stack->push($request);
$this->formBuilder = $this->getMockBuilder('\Drupal\Core\Form\FormBuilder')
@@ -598,6 +601,7 @@ public function testExceededFileSize() {
public function testPostAjaxRequest(): void {
$request = new Request([FormBuilderInterface::AJAX_FORM_REQUEST => TRUE], ['form_id' => 'different_form_id']);
$request->setMethod('POST');
+ $request->setSession(new Session(new MockArraySessionStorage()));
$this->requestStack->push($request);
$form_state = (new FormState())
diff --git a/core/tests/Drupal/Tests/Core/Form/FormTestBase.php b/core/tests/Drupal/Tests/Core/Form/FormTestBase.php
index 9de2c5e1ac9945c2ef65e24ca55d9e0d5e880ee2..53c96350e836bad34aca9d7e1abd0735fddc26a1 100644
--- a/core/tests/Drupal/Tests/Core/Form/FormTestBase.php
+++ b/core/tests/Drupal/Tests/Core/Form/FormTestBase.php
@@ -14,6 +14,8 @@
use Drupal\Tests\UnitTestCase;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\RequestStack;
+use Symfony\Component\HttpFoundation\Session\Session;
+use Symfony\Component\HttpFoundation\Session\Storage\MockArraySessionStorage;
/**
* Provides a base class for testing form functionality.
@@ -184,6 +186,7 @@ protected function setUp(): void {
$this->account = $this->createMock('Drupal\Core\Session\AccountInterface');
$this->themeManager = $this->createMock('Drupal\Core\Theme\ThemeManagerInterface');
$this->request = Request::createFromGlobals();
+ $this->request->setSession(new Session(new MockArraySessionStorage()));
$this->eventDispatcher = $this->createMock('Symfony\Contracts\EventDispatcher\EventDispatcherInterface');
$this->requestStack = new RequestStack();
$this->requestStack->push($this->request);