This project is not covered by Drupal’s security advisory policy.
Applies Mutamad's controls to Drupal Canvas, which Canvas does not offer on its own:
- a change is published by an approver who did not make it
- a page an editor creates starts unpublished
- the Canvas editor works under a strict Content Security Policy
Installed by the Mutamad Canvas recipe. Aligned to NCA ECC-2:2024 1-3-1, 2-12 and 2-15.
Part of Mutamad
Part of Mutamad, the Drupal distribution for Saudi government websites. Mutamad Standard Site applies it on every Mutamad site.
Requirements
- Drupal 11.4
- canvas
Installation
composer require drupal/mutamad_canvas_controls drush en mutamad_canvas_controls
Documentation
The README explains every setting and why, and the changelog what changed in each release.
Supporting organizations:
Development and maintenance
Project information
- Project categories: Access control, Content editing experience, Security
- Ecosystem: Drupal Canvas
- Created by alaa abbad on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.

