Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
- Log in or register to create an issue
- Advanced search
Title | Status | Priority | Category | Version | Component | Replies | Last updated | Assigned to | Created |
---|---|---|---|---|---|---|---|---|---|
user login block form made enumeration possible | Needs work | Normal | Bug report | 8.x-1.2 | Code | 6 | 3 days 11 hours | 1 year 7 months | |
Automated Drupal 11 compatibility fixes for username_enumeration_prevention | Needs review | Normal | Task | 8.x-1.3 | Code | 3 | 1 month 1 day | 1 month 1 day | |
Add gitlab CI | Needs review | Normal | Task | 8.x-1.x-dev | Code | 5 | 2 months 1 week | 4 months 2 weeks | |
Password Reset form validation is not prompted anymore | Reviewed & tested by the community | Major | Bug report | 8.x-1.x-dev | Code | 14 | 3 months 4 weeks | 3 years 8 months | |
Update redirect after password reset to follow core (and resolve when user.page is not accessible) | Needs review | Normal | Task | 8.x-1.x-dev | Code | 8 | 7 months 4 weeks | 1 year 2 months | |
drupal-settings-json/currentPath is leaking user existence | Reviewed & tested by the community | Major | Bug report | 8.x-1.x-dev | Code | 8 | 10 months 1 week | 1 year 10 months | |
Class not found error occurs on password reset | Postponed (maintainer needs more info) | Normal | Bug report | 8.x-1.x-dev | Code | 4 | 1 year 2 months | 3 years 6 months | |
Blocked user existence is revealed on login form | Active | Minor | Bug report | 8.x-1.x-dev | Code | 1 | 1 year 3 months | 1 year 3 months | |
Argument #1 ($string) must be of type string, array given in trim() | Reviewed & tested by the community | Normal | Bug report | 7.x-1.x-dev | Code | 4 | 1 year 3 months | 1 year 7 months | |
Add Support for JSON:API as Well | Needs review | Major | Feature request | 8.x-1.x-dev | Code | 8 | 1 year 4 months | 3 years 2 weeks | |
Update Project Page | Active | Major | Task | 8.x-1.x-dev | Documentation | 6 | 1 year 4 months | 3 years 3 months | |
Password reset json endpoint reveals whether an email or username is in use | Active | Major | Bug report | 8.x-1.x-dev | Code | 3 | 1 year 4 months | 1 year 10 months | |
Module not needed with D7 core patch in #3200198 | Needs review | Major | Support request | 7.x-1.x-dev | Documentation | 7 | 1 year 4 months | 2 years 11 months | |
Password reset form has no flood control | Needs work | Major | Bug report | 8.x-1.x-dev | Code | 9 | 1 year 4 months | 4 years 2 months | |
Enumeration is still possible for authenticated users | Active | Normal | Task | 8.x-1.x-dev | Code | 2 | 1 year 5 months | 1 year 5 months | |
Provide config or alter for the username_enumeration_prevention_pass_submit message | Active | Normal | Feature request | 8.x-1.x-dev | Code | 1 | 3 years 4 months | 3 years 4 months |