Problem/Motivation
The Seckit module defines several X-XSS-Protection option keys in its configuration, but these keys are currently missing from the module’s config schema.
Specifically, the following settings are present in configuration and used by the module, but are not declared in seckit.schema.yml:
seckit_x_xss_option_disable
seckit_x_xss_option_0
seckit_x_xss_option_1
seckit_x_xss_option_1_block
Because these keys are not defined in the schema, tools like Config Inspector report schema validation warnings for otherwise valid Seckit configuration.
Steps to reproduce
- Install and enable the Seckit module.
- Ensure Seckit configuration includes X-XSS-Protection options (default or customized).
- Run a configuration schema validation tool, for example:
- Navigate to Reports → Configuration inspector
- Inspect seckit.settings
- Observe schema validation warnings for the following keys:
- seckit_x_xss_option_disable
- seckit_x_xss_option_0
- seckit_x_xss_option_1
- seckit_x_xss_option_1_block
Proposed resolution
Apply patch that adds explicit schema definitions for the missing X-XSS-Protection option keys under seckit.settings, aligning the schema with the actual configuration used by the module.
Why this matters
Eliminates false-positive schema warnings
Improves configuration correctness and introspection
Keeps Seckit compliant with Drupal’s configuration schema best practices
No functional behavior changes — schema only
Remaining tasks
Review the patch.
User interface changes
API changes
Data model changes
| Comment | File | Size | Author |
|---|---|---|---|
| #2 | 3563719-seckit-missing-x-xss-config-schema.patch | 799 bytes | thefancywizard |
Comments
Comment #2
thefancywizard commentedAttaching patch.
Comment #3
apotek commentedThis looks right to me, and this silences the complain during config imports. Previously, I was getting:
> Message: Schema errors for seckit.settings with the following errors:
> seckit.settings:seckit_xss.x_xss.seckit_x_xss_option_disable missing schema,
> seckit.settings:seckit_xss.x_xss.seckit_x_xss_option_0 missing schema,
> seckit.settings:seckit_xss.x_xss.seckit_x_xss_option_1 missing schema,
> seckit.settings:seckit_xss.x_xss.seckit_x_xss_option_1_block missing schema.
> These errors mean there is configuration that does not comply with its schema. This is not a fatal error, but it is recommended to fix these issues.
> For more information on configuration schemas, check out the documentation [1].
> [1] https://www.drupal.org/docs/drupal-apis/configuration-api/configuration-...
This patch fixes these warnings.