- Log in or register to create an issue
- Advanced search
| Title | Status | Priority | Category | Version | Component | Replies |
Last updated |
Assigned to | Created |
|---|---|---|---|---|---|---|---|---|---|
| Make auto sources configurable | Needs review | Normal | Feature request | 8.x-1.x-dev | Code | 26 | 4 weeks 1 day | 4 years 7 months | |
| Report-URI directive is deprecated, should be replaced with report-to | Active | Normal | Feature request | 2.x-dev | Code | 2 | 1 month 20 hours | 2 months 1 week | |
| Automated Drupal 12 compatibility fixes for csp 2.x-dev | Active | Normal | Task | 2.x-dev | Code | 7 | 1 month 21 hours | 2 months 1 week | |
| Missing titles on admin form | Needs review | Normal | Bug report | 2.x-dev | Code | 6 | 2 months 2 days | 2 months 4 days | |
| Remove X-Frame-Options Header | Active | Normal | Task | 2.x-dev | Code | 3 | 2 months 4 days | 2 years 4 months | |
| Provides a filter to add nonce attribute to inline scripts. | Needs work | Normal | Feature request | 2.x-dev | Code | 23 | 2 months 1 week | 2 years 7 months | |
| Validate directive names in configuration | Active | Minor | Task | 2.x-dev | Code | 4 | 2 months 4 weeks | 1 year 11 months | |
| Option to use strict-dynamic for scripts | Postponed | Normal | Task | 2.x-dev | Miscellaneous | 6 | 2 months 4 weeks | 1 year 5 months | |
| Fix functional tests on D12 | Active | Normal | Task | 2.x-dev | Code | 1 | 3 months 3 weeks | gapple | 3 months 3 weeks |
| Update tests | Active | Normal | Plan | 2.x-dev | Code | 1 | 3 months 3 weeks | 3 months 3 weeks | |
| Config overrides cause PHP warning and missing link text | Active | Normal | Bug report | 2.x-dev | Code | 2 | 3 months 4 weeks | 1 year 3 months | |
| Remove code for Firefox bug 1313937 | Reviewed & tested by the community | Minor | Task | 2.x-dev | Code | 10 | 5 months 2 weeks | 2 years 7 months | |
| 'directives' is a required key. | Needs review | Normal | Bug report | 2.x-dev | Code | 6 | 6 months 2 weeks | 1 year 2 months | |
| Only add header to relevant responses | Reviewed & tested by the community | Normal | Task | 2.x-dev | Code | 12 | 6 months 4 weeks | 7 years 9 months | |
| Reporting URI handler does not allow relative/local URIs | Active | Normal | Feature request | 2.x-dev | Code | 2 | 9 months 1 week | 10 months 13 hours | |
| Allow script / style by nonce | Active | Normal | Feature request | 8.x-1.x-dev | Code | 18 | 10 months 1 week | 6 years 10 months | |
| Prioritise visibility of enabled policy types on configuration page loads | Needs review | Normal | Feature request | 2.x-dev | Code | 4 | 11 months 4 weeks | 11 months 4 weeks | |
| TypeError: Drupal\Core\Routing\CurrentRouteMatch::getRouteMatch(): Argument #1 ($request) must be of type Symfony\Component\HttpFoundation\Request, null given, called in /var/www/html/web/core/lib/Drupal/Core/Routing/CurrentRouteMatch.php | Active | Normal | Bug report | 2.x-dev | Code | 1 | 1 year 4 weeks | 1 year 4 weeks | |
| Core Toolbar anti-flicker script adds inline style | Active | Normal | Plan | 2.x-dev | Code | 6 | 1 year 1 month | 1 year 11 months | |
| Refactor policy config to config entities | Active | Normal | Task | 2.x-dev | Code | 1 | 1 year 3 months | 1 year 3 months | |
| The Content-Security-Policy module is missing a README, which serves as documentation. | Needs review | Normal | Task | 2.x-dev | Documentation | 7 | 1 year 8 months | 1 year 11 months | |
| Add config validation constraint for source list flags | Postponed | Minor | Task | 2.x-dev | Code | 2 | 1 year 11 months | 1 year 11 months | |
| Enable specifying additional directives in library definitions | Active | Normal | Feature request | 2.x-dev | Code | 3 | 1 year 11 months | 2 years 2 months | |
| Show current policy on config form | Active | Normal | Feature request | 2.x-dev | Code | 1 | 1 year 11 months | 1 year 11 months | |
| Create and use Enum classes internally | Needs review | Normal | Task | 2.x-dev | Code | 3 | 1 year 11 months | 1 year 11 months | |
| Project Browser: Create a logo for Content-Security-Policy | Needs review | Normal | Task | 2.x-dev | User interface | 10 | 2 years 6 hours | 2 years 1 month | |
| Use Enums | Active | Normal | Plan | 2.x-dev | Code | 2 | 2 years 3 days | 2 years 4 days | |
| Enable conditional/alternate directive values | Active | Normal | Feature request | 2.x-dev | Code | 5 | 2 years 3 months | 2 years 9 months | |
| Cache CSP header for dynamic requests | Needs work | Normal | Feature request | 8.x-1.x-dev | Code | 9 | 2 years 3 months | 3 years 8 months | |
| Create script-src from script-src-attr and script-src-elem | Postponed | Normal | Feature request | 2.x-dev | Code | 5 | 2 years 7 months | 6 years 8 months | |
| Copy configuration between report-only and enforced | Active | Minor | Feature request | 2.x-dev | Code | 4 | 2 years 7 months | 8 years 4 weeks | |
| Provide different CSP policy for private files | Active | Normal | Feature request | 2.x-dev | Code | 2 | 2 years 7 months | 6 years 2 weeks | |
| Improve handling of sources from libraries | Active | Normal | Plan | 2.x-dev | Code | 2 | 2 years 7 months | 2 years 9 months | |
| Implementation of hook_help() in module file | Needs work | Normal | Task | 8.x-1.x-dev | Code | 5 | 2 years 7 months | 3 years 4 months | |
| Use full file path for external library sources | Needs work | Normal | Feature request | 8.x-1.x-dev | Code | 6 | 2 years 7 months | 4 years 6 months | |
| Provide help text on how to handle scheme sources like "blob:" | Active | Normal | Feature request | 8.x-1.x-dev | Documentation | 1 | 2 years 12 months | 2 years 12 months | |
| Add utility methods for adding CSP information | Needs review | Normal | Feature request | 8.x-1.x-dev | Code | 4 | 4 years 8 months | 4 years 8 months |
Subscribe with RSS 