|
security_review_toggle_check() has $type and $check_name in the wrong parameter order |
Closed (won't fix) |
Normal |
Bug report |
7.x-1.3 |
Code |
|
2 days 11 hours |
|
Drush command emits "Undefined array key" warnings and reports skipped checks as "success" |
Active |
Normal |
Bug report |
4.0.x-dev |
Code |
|
2 weeks 4 days |
|
Checks using sub requests with guzzle get wrong results on 403 situations |
Needs work |
Normal |
Bug report |
3.1.x-dev |
Code |
c-logemann |
2 years 2 months |
|
CLI/Drush cannot do file checks directly |
Postponed (maintainer needs more info) |
Normal |
Bug report |
3.1.x-dev |
Code |
|
2 years 2 months |
|
X-Frame-Options false negative |
Closed (fixed) |
Normal |
Bug report |
3.1.3 |
Code |
|
8 months 4 weeks |
|
False positives header tests due to case sensitivity |
Closed (fixed) |
Major |
Bug report |
3.1.x-dev |
Code |
|
7 months 1 week |
|
MissingMandatoryParametersException when viewing upload extensions help page |
Closed (fixed) |
Normal |
Bug report |
3.1.x-dev |
Code |
|
9 months 6 days |
|
Checking test details before running test throws an exception |
Closed (fixed) |
Normal |
Bug report |
3.1.x-dev |
Code |
smustgrave |
8 months 3 weeks |
|
SecRev can not be run with Drush on sites with non-english default language |
Closed (fixed) |
Major |
Bug report |
3.1.x-dev |
Code |
|
9 months 5 days |
|
Some Details links give Page not found |
Closed (duplicate) |
Normal |
Bug report |
3.1.x-dev |
Code |
|
7 months 2 weeks |
|
DB Log error - ArgumentCountError: Too few arguments to function Drupal\security_review\SecurityReview::__construct(), 4 passed |
Closed (cannot reproduce) |
Normal |
Bug report |
3.1.1 |
Code |
|
8 months 3 weeks |
|
AJAX HTTP Error During Security Review Analysis and Multiple Errors on Settings Page |
Closed (cannot reproduce) |
Normal |
Bug report |
3.1.x-dev |
Code |
|
1 year 7 months |
|
Error using drush "skip" option values where id and title are different |
Closed (fixed) |
Normal |
Bug report |
3.1.x-dev |
Code |
|
1 year 2 weeks |
|
Fix fatal error when pressing Run checklist button |
Closed (fixed) |
Normal |
Bug report |
3.0.x-dev |
Code |
|
2 years 3 weeks |
|
Headers check should be lowercase |
Closed (works as designed) |
Normal |
Bug report |
3.1.x-dev |
Code |
mdranove |
1 year 8 months |
|
Fields::getDetails() can return a TranslatableMarkup object |
Closed (fixed) |
Normal |
Bug report |
3.1.1 |
Code |
|
1 year 1 month |
|
In valid array in Security.php on scan null given in in_array() |
Closed (outdated) |
Normal |
Bug report |
2.0.2 |
Code |
|
1 year 3 months |
|
TypeError: array_key_exists(): Argument #2 ($array) must be of type array, null given in array_key_exists() (line 203 of modules/contrib/security_review/src/SecurityReview.php). |
Closed (cannot reproduce) |
Normal |
Bug report |
3.0.3 |
Code |
|
1 year 9 months |
|
False Negative for Writeable .htaccess on NGINX |
Closed (fixed) |
Normal |
Bug report |
8.x-1.x-dev |
Code |
|
11 years 7 months |
|
Long field names which are shortened by Drupal doesn't work. |
Closed (fixed) |
Normal |
Bug report |
2.0.x-dev |
Code |
|
5 years 11 months |
|
file check is problematic "green" when not test with chmod |
Closed (fixed) |
Normal |
Bug report |
3.1.x-dev |
Code |
|
2 years 2 months |
|
TypeError: Drupal\user\UserAuthentication::authenticateAccount(): Argument #1 (closed) ($account) must be of type Drupal\user\UserInterface, bool given |
Closed (fixed) |
Normal |
Bug report |
3.1.x-dev |
Code |
|
1 year 9 months |
|
Once failed but skipped checks shown as warning on status page |
Closed (fixed) |
Normal |
Bug report |
3.1.x-dev |
Code |
|
1 year 9 months |
|
Update 3.0.4 > 3.1.0 |
Closed (works as designed) |
Normal |
Bug report |
3.1.0 |
Miscellaneous |
|
1 year 9 months |
|
Problem with Mail Login || Deprecation of UserAuthInterface |
Closed (fixed) |
Normal |
Bug report |
3.1.x-dev |
Code |
|
2 years 3 weeks |
|
Hashes in dangerous tags in content exclude list not working |
Closed (fixed) |
Normal |
Bug report |
3.0.3 |
Code |
|
1 year 10 months |
|
Drush command does not display checks anymore |
Closed (fixed) |
Normal |
Bug report |
3.0.2 |
Code |
|
2 years 1 month |
|
views_access check is broken |
Closed (fixed) |
Normal |
Bug report |
3.0.2 |
Code |
|
2 years 3 weeks |
|
Private files path is not detected correctly |
Closed (fixed) |
Normal |
Bug report |
3.0.2 |
Code |
|
2 years 3 weeks |
|
[error] Message: Error executable_php, access was denied to the file. |
Closed (fixed) |
Normal |
Bug report |
3.0.x-dev |
Code |
|
2 years 2 months |
|
Call to undefined method Drupal\security_review\Plugin\SecurityCheck\AdminPermissions::isSkipped() |
Closed (fixed) |
Normal |
Bug report |
3.0.2 |
Code |
|
2 years 1 month |
|
Message TypeError: array_key_exists(): Argument #2 ($array) must be of type array, null given in array_key_exists() |
Closed (outdated) |
Normal |
Bug report |
3.0.x-dev |
Code |
|
2 years 7 months |
|
Get server uid function return unexpected type null |
Closed (fixed) |
Normal |
Bug report |
3.0.x-dev |
Code |
|
2 years 2 months |
|
PrivateFiles check may fail or give misleading results for alternate stream wrappers |
Closed (fixed) |
Major |
Bug report |
3.0.x-dev |
Code |
|
2 years 11 months |
|
unintended commited timestamp in IGNOREME.txt |
Closed (fixed) |
Normal |
Bug report |
3.0.x-dev |
Code |
|
2 years 2 months |
|
Only check default view access if it is used |
Closed (fixed) |
Normal |
Bug report |
2.0.x-dev |
Code |
|
5 years 3 weeks |
|
Required parameter $check_name follows optional parameter |
Closed (fixed) |
Normal |
Bug report |
7.x-1.3 |
Code |
|
4 years 6 days |
|
Refactor trusted hosts check |
Closed (fixed) |
Normal |
Bug report |
2.0.x-dev |
Code |
|
7 years 9 months |
|
[error] TypeError: Drupal\security_review\SecurityReview::getServerUid(): Return value must be of type int, null returned |
Closed (duplicate) |
Normal |
Bug report |
3.0.x-dev |
Code |
|
2 years 2 months |
|
After upgrading from 2.x to 3.x skipped config is null |
Closed (outdated) |
Normal |
Bug report |
3.0.0 |
Code |
|
2 years 4 months |
|
Can't uninstall |
Closed (works as designed) |
Normal |
Bug report |
2.0.2 |
Code |
|
2 years 4 months |
|
State should be cleaned on uninstall |
Closed (fixed) |
Normal |
Bug report |
3.0.x-dev |
Code |
|
2 years 5 months |
|
Warning: Undefined array key "result" in security_review_requirements() (line 51 of security_review.install) |
Closed (fixed) |
Normal |
Bug report |
3.0.0-rc2 |
Code |
|
2 years 6 months |
|
name / passwords check not working as expected |
Closed (fixed) |
Normal |
Bug report |
3.0.0-rc2 |
Code |
|
2 years 6 months |
|
State should be cleaned on uninstall |
Closed (fixed) |
Normal |
Bug report |
2.0.2 |
Code |
|
2 years 6 months |
|
security_review.checks.yml fails blt yaml validation |
Closed (works as designed) |
Major |
Bug report |
3.0.x-dev |
Code |
|
2 years 6 months |
|
Error: Call to a member function isAdmin() on null in Drupal\security_review\Security->rolePermissions() |
Closed (fixed) |
Normal |
Bug report |
2.0.0 |
Code |
|
7 years 1 month |
|
PHP 8.1 Warning: Array to string conversion |
Closed (fixed) |
Normal |
Bug report |
2.0.x-dev |
Code |
|
2 years 8 months |
|
Executable PHP in files directory - false negative |
Closed (outdated) |
Normal |
Bug report |
7.x-1.3 |
Code |
|
12 years 2 months |
|
SQL syntax error in Field check when run on PostgreSQL |
Closed (fixed) |
Normal |
Bug report |
2.0.x-dev |
Code |
|
2 years 11 months |