Websites that accept user input without validation can become vulnerable to cross-site scripting. Cross-Site Scripting or XSS is a typical web application security vulnerability.
Drupal Association in a press release stated Drupal version 8’s End of Life (EOL) to be this November( 2021). This coincides with Symfony 3’s EOL. Drupal Association has already announced EOL of the recently released Drupal 9. EOL of Drupal 9 will be in 2023 to concur with that of Symfony 4.4.
But why this dependency is a valid question that can come to a client’s mind. Both Drupal and Symfony are free and open source, written in PHP and used to build websites.
Why EOL of Drupal Versions Depend on Symfony?
Drupal 8 in its core library has a lot of reusable Symfony components. Symfony comprises a major chunk of Drupal’s third party dependency. Drupal 8’s end of life thus coincides with Symfony 3’s falling in November 2021. Drupal 9, the new version is updated to Symfony 4.4.
Drupal had built its core without using third parties from its conception till Drupal 7. Why did Drupal then break off from the practice of developing all its Core features?