Follow-up to #2877082: Hook Webform Submission and prevent submission, if source entity is missing.

Problem/Motivation

Webform can have the source entity passed as a URL parameter. The source entity is not restricted to a specific entity type or validated.

Proposed resolution

Validate source entity that passed as URL parameters.

Remaining tasks

  • Always validate source entity and return access denied page for invalid source entities.
  • Add form_prepopulate_source_entity_type to webform settings
  • Validate source entity type and return access denied page for invalid source entity type.
CommentFileSizeAuthor
#3 validate_source_entity-2888850-2.patch118.32 KBjrockowitz
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

jrockowitz created an issue. See original summary.

  • jrockowitz committed d92dd3c on 2888850-validate-source-entity 
    Issue #2888850: Validate source entity that passed as URL parameters.
jrockowitz’s picture

jrockowitz CreditAttribution: jrockowitz as a volunteer and at The Big Blue House commented
Status: Active » Fixed
FileSize
validate_source_entity-2888850-2.patch118.32 KB
jrockowitz’s picture

jrockowitz CreditAttribution: jrockowitz as a volunteer and at The Big Blue House commented
Status: Fixed » Needs review
jrockowitz’s picture

jrockowitz CreditAttribution: jrockowitz as a volunteer and at The Big Blue House commented
Status: Needs review » Fixed

  • jrockowitz committed 7dee2ee on 8.x-5.x 
    Issue #2888850 by jrockowitz: Validate source entity that passed as URL...

  • jrockowitz committed bdb7e41 on 8.x-5.x 
    Issue #2888850 by jrockowitz: Validate source entity that passed as URL...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.