Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Reporter:
Created:
11 Oct 2018 at 17:07 UTC
Updated:
10 Feb 2019 at 20:44 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #2
nkoporecComment #3
nkoporecComment #4
avpadernoComment #5
avpadernoThank you for your contribution! May you describe the difference between this project and the Metatag module?
Comment #6
nkoporecHi,
Well the main difference is that it offers less options and because of that is easier to use and the UI is less complicated. It is a clone of the same module for Drupal 7 called Simple Meta.
Comment #7
nkoporecComment #8
abhishek.kumar commentedLooks good to me. However there is some indentation issue in function sitemeta_form_node_form_validate. But I think this module is good enough to covered in security advisory coverage.
Comment #9
avpadernoThere are just two points I find unclear.
{@inheritdoc}is not used for hooks.What form should that hook alter?
That submission handler has not been added from a
hook_form_alter(),hook_form_FORM_ID_alter(), orhook_form_BASE_FORM_ID_alter()implementation, so it would not be invoked.Comment #10
strozx commentedHi, I wrote a patch that addresses the issues written above.
Comment #11
avpadernoThe task of reviewers is reviewing code, not providing patches to fix what reported by other users.
Comment #12
avpadernoComment #13
nkoporecThis has been now fixed in the latest release. Thank you for reviewing!
Comment #14
avpaderno{@inheritdoc} is not used for hooks.
Why would the code only change the node edit form when a node is edited, and when not a node is created. The settings make sense in both the cases.
#access is not necessary, in that case.
It would be simpler to use
$this->set('status', (bool) $published);.I didn't find any security issue. I am going to approve this application in the next hours.
Comment #15
avpadernoThank you for your contribution! I am going to update your account.
These are some recommended readings to help with excellent maintainership:
You can find more contributors chatting on the IRC #drupal-contribute channel. So, come hang out and stay involved.
Thank you, also, for your patience with the review process.
Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
I thank all the dedicated reviewers as well.