Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Reporter:
Created:
16 Aug 2019 at 09:03 UTC
Updated:
17 Sep 2019 at 02:59 UTC
Jump to comment: Most recent
Comments
Comment #2
ivnishPlease fix pareview warnings first
Comment #3
apolitsin commentedFix codestyle problems in css and js files.
Cannot fix `Error - Use the function form of 'use strict'. ` couse i need this staff.
Comment #4
avpadernoThank you for applying! I added the Git instructions for non-maintainer users. Reviewers will check the project and post comments to list what should be changed.
Comment #5
vuilThank you for the contribution!
I have found many security related issues (errors/warnings/notices), please fix all of them.
(1.)
Please fix the following issues related to ESLint, there are some issues within the code (please check the JavaScript coding standards):
(2.)
Please don't use dynamically created properties like
$this->langin PagePolicy class.Just declare them at first (into the Class), then initialize them in
__construct(), and use them after that.It is important your code to be as much as possible clear and mindful.
(3.)
Please replace the usage of
\Drupal::request()with the Dependency Injection (DI) and$container->get('request_stack').(4.)
Replace the wrong and deprecated usage of
entityManager()withentityTypeManager()(all uses) in your Dependency Injection (DI) andSettingsFormWarningclass.(5.)
Always keep attention on your configuration forms input secure and Sanitizing Output, read more https://www.drupal.org/docs/8/security
Update texts to use the more secure:
Url::fromRoute('Some text @param', ['param' => $param_url])->toString();instead of plain text:
/user/registerand/user/login.An example:
Url::fromRoute('entity.node.canonical', ['node' => $next['nid']])->toString();Comment #6
KuldeepM commentedFix Error - Use the function form of 'use strict'. (strict) issue.
Comment #7
klausiThanks for your contribution!
Looks good to me, did not see a security issue.
Comment #8
avpadernoThank you for your contribution! I am going to update your account.
These are some recommended readings to help with excellent maintainership:
You can find more contributors chatting on the IRC #drupal-contribute channel. So, come hang out and stay involved.
Thank you, also, for your patience with the review process.
Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
I thank all the dedicated reviewers as well.