- Log in or register to create an issue
- Advanced search
| Title | Status | Priority | Category | Version | Component | Replies |
Last updated |
Assigned to | Created |
|---|---|---|---|---|---|---|---|---|---|
| security_review_toggle_check() has $type and $check_name in the wrong parameter order | Closed (won't fix) | Normal | Bug report | 7.x-1.3 | Code | 3 | 2 days 9 hours | 2 days 9 hours | |
| Drush command emits "Undefined array key" warnings and reports skipped checks as "success" | Active | Normal | Bug report | 4.0.x-dev | Code | 1 | 2 weeks 4 days | 2 weeks 4 days | |
| Multi-site writable files check should ignore sites/*/files | Closed (fixed) | Normal | Feature request | 4.0.x-dev | Code | 9 | 3 weeks 1 day | 1 month 4 weeks | |
| Move from state API tot dedicated key/value collection | Closed (fixed) | Normal | Task | 4.0.x-dev | Code | 11 | 3 weeks 2 days | 1 year 9 months | |
| Update to D12, Drop Annotations, Autowire services, remove module file | Closed (fixed) | Normal | Task | 4.0.x-dev | Code | 9 | 3 weeks 2 days | 1 month 4 weeks | |
| Checks using sub requests with guzzle get wrong results on 403 situations | Needs work | Normal | Bug report | 3.1.x-dev | Code | 22 | 1 month 2 days | c-logemann | 2 years 2 months |
| Check for sample/example/demo directory of libraries | Active | Normal | Feature request | 3.1.x-dev | Code | 15 | 1 month 2 days | 9 years 11 months | |
| Check for CSP on private and public SVG files | Needs work | Normal | Feature request | 3.1.x-dev | Code | 13 | 1 month 6 days | 1 year 7 months | |
| There should be a new test for ownership of files and directories | Active | Normal | Feature request | 4.0.x-dev | Code | 21 | 1 month 1 week | 10 years 11 months | |
| CLI/Drush cannot do file checks directly | Postponed (maintainer needs more info) | Normal | Bug report | 3.1.x-dev | Code | 9 | 1 month 1 week | 2 years 2 months | |
| [drupal_insight] Request for security advisory coverage | Closed (works as designed) | Normal | Task | 8.x-1.x-dev | Code | 3 | 1 month 2 weeks | 1 month 2 weeks | |
| X-Frame-Options false negative | Closed (fixed) | Normal | Bug report | 3.1.3 | Code | 11 | 4 months 2 days | 8 months 4 weeks | |
| False positives header tests due to case sensitivity | Closed (fixed) | Major | Bug report | 3.1.x-dev | Code | 8 | 6 months 1 week | 7 months 1 week | |
| Make warnings or errors pop on Details page | Closed (fixed) | Normal | Feature request | 3.1.x-dev | User interface | 18 | 7 months 1 day | 8 months 4 weeks | |
| Add account creation check | Closed (fixed) | Normal | Feature request | 3.1.x-dev | Code | 36 | 7 months 3 days | smustgrave | 8 months 4 weeks |
| Place most critical checks at the top | Closed (won't fix) | Normal | Feature request | 3.1.x-dev | User interface | 4 | 7 months 1 week | 7 months 1 week | |
| MissingMandatoryParametersException when viewing upload extensions help page | Closed (fixed) | Normal | Bug report | 3.1.x-dev | Code | 12 | 7 months 1 week | 9 months 6 days | |
| Checking test details before running test throws an exception | Closed (fixed) | Normal | Bug report | 3.1.x-dev | Code | 9 | 7 months 1 week | smustgrave | 8 months 3 weeks |
| Convert to Attributes | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 6 | 7 months 2 weeks | 8 months 7 hours | |
| SecRev can not be run with Drush on sites with non-english default language | Closed (fixed) | Major | Bug report | 3.1.x-dev | Code | 13 | 7 months 2 weeks | 9 months 5 days | |
| Add test coverage for VendorDirectory and UploadExtensions | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 7 | 7 months 2 weeks | 9 months 2 days | |
| Add better test coverage per check | Closed (fixed) | Normal | Plan | 3.1.x-dev | Code | 13 | 7 months 2 weeks | 1 year 9 months | |
| Add test coverage for FilePermissions | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 7 | 7 months 2 weeks | smustgrave | 9 months 1 day |
| Add test coverage for Headers, InputFormats, and LastCronRun | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 12 | 7 months 2 weeks | mdranove | 9 months 1 day |
| Whitelist views/displays in View access check | Closed (fixed) | Normal | Feature request | 3.1.x-dev | Code | 20 | 7 months 2 weeks | smustgrave | 5 years 2 months |
| Some Details links give Page not found | Closed (duplicate) | Normal | Bug report | 3.1.x-dev | Code | 10 | 7 months 2 weeks | 7 months 2 weeks | |
| DB Log error - ArgumentCountError: Too few arguments to function Drupal\security_review\SecurityReview::__construct(), 4 passed | Closed (cannot reproduce) | Normal | Bug report | 3.1.1 | Code | 4 | 7 months 3 weeks | 8 months 3 weeks | |
| AJAX HTTP Error During Security Review Analysis and Multiple Errors on Settings Page | Closed (cannot reproduce) | Normal | Bug report | 3.1.x-dev | Code | 6 | 8 months 1 day | 1 year 7 months | |
| Add test coverage for TrustedHosts and TemporaryFiles | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 6 | 8 months 1 week | smustgrave | 8 months 3 weeks |
| Error using drush "skip" option values where id and title are different | Closed (fixed) | Normal | Bug report | 3.1.x-dev | Code | 16 | 8 months 1 week | 1 year 2 weeks | |
| Improve wording for Untrusted roles warning, or update the check | Closed (fixed) | Normal | Task | 3.1.x-dev | Miscellaneous | 13 | 8 months 2 weeks | 9 months 12 hours | |
| Add test coverage for ViewsAccess | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 7 | 8 months 2 weeks | 9 months 1 day | |
| .htaccess file is writable, using the current Securing file permissions and ownership doc page | Closed (fixed) | Normal | Task | 3.1.x-dev | Documentation | 19 | 8 months 2 weeks | 10 months 1 week | |
| Add test coverage for NamePasswords, PrivateFiles, and QueryErrors | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 6 | 8 months 2 weeks | smustgrave | 9 months 1 day |
| Add test coverage for fields plugin | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 8 | 8 months 2 weeks | smustgrave | 9 months 2 days |
| Create tests for AdminUser, ErrorReporting, ExecutablePhp, FailedLogin | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 6 | 8 months 2 weeks | smustgrave | 9 months 2 days |
| Fix fatal error when pressing Run checklist button | Closed (fixed) | Normal | Bug report | 3.0.x-dev | Code | 18 | 9 months 1 day | 2 years 3 weeks | |
| Headers check should be lowercase | Closed (works as designed) | Normal | Bug report | 3.1.x-dev | Code | 5 | 9 months 1 day | mdranove | 1 year 8 months |
| Add "restrict access" to the "access security review list" permission | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 10 | 1 year 2 days | smustgrave | 1 year 8 months |
| Fields::getDetails() can return a TranslatableMarkup object | Closed (fixed) | Normal | Bug report | 3.1.1 | Code | 5 | 1 year 2 days | 1 year 1 month | |
| In valid array in Security.php on scan null given in in_array() | Closed (outdated) | Normal | Bug report | 2.0.2 | Code | 6 | 1 year 2 weeks | 1 year 3 months | |
| TypeError: array_key_exists(): Argument #2 ($array) must be of type array, null given in array_key_exists() (line 203 of modules/contrib/security_review/src/SecurityReview.php). | Closed (cannot reproduce) | Normal | Bug report | 3.0.3 | Code | 8 | 1 year 6 months | 1 year 9 months | |
| False Negative for Writeable .htaccess on NGINX | Closed (fixed) | Normal | Bug report | 8.x-1.x-dev | Code | 28 | 1 year 7 months | 11 years 7 months | |
| Add test for adminPermission Plugin + start testbase | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 5 | 1 year 8 months | 1 year 8 months | |
| Long field names which are shortened by Drupal doesn't work. | Closed (fixed) | Normal | Bug report | 2.0.x-dev | Code | 20 | 1 year 8 months | 5 years 11 months | |
| file check is problematic "green" when not test with chmod | Closed (fixed) | Normal | Bug report | 3.1.x-dev | Code | 17 | 1 year 8 months | 2 years 2 months | |
| TypeError: Drupal\user\UserAuthentication::authenticateAccount(): Argument #1 (closed) ($account) must be of type Drupal\user\UserInterface, bool given | Closed (fixed) | Normal | Bug report | 3.1.x-dev | Code | 9 | 1 year 8 months | 1 year 9 months | |
| Once failed but skipped checks shown as warning on status page | Closed (fixed) | Normal | Bug report | 3.1.x-dev | Code | 6 | 1 year 8 months | 1 year 9 months | |
| Update 3.0.4 > 3.1.0 | Closed (works as designed) | Normal | Bug report | 3.1.0 | Miscellaneous | 5 | 1 year 9 months | 1 year 9 months | |
| Validate schema | Closed (fixed) | Normal | Task | 3.1.x-dev | Code | 5 | 1 year 9 months | smustgrave | 1 year 9 months |
Pages
Subscribe with RSS 