Their online offerings had been in use for the past 5 years and were due for a facelift. In addition to the dire need for a visual update, their previous system was built on an obsolete platform which was not utilising all the features available to them via their worldwide infrastructure managed from their headquarters in Paris. Finally, they had no control over the content they were making available on their mobile apps.
Using Drupal 8. I am creating a block that holds an image, I would like the image, which is the only thing in the block, to be an active link to another site.
I ran a vulnerability scan on my site this evening. Everything all good apart from a couple of warnings. Is this something that I should address? I think these cookies are set via core but if someone could offer some insight/solution that'd be great. Thanks.
Insecure cookie setting: missing HttpOnly flag
/big_pipe/no-js?destination=/en/user/password
Set-Cookie: big_pipe_nojs
Currently I can only set the text filter to allow or prohibit images from remote sources. Means I can either stop all such images or I have to allow all such images.
Is there any way to override this? Say I want to allow from a known host and prohibit from others.
I was hoping "hook_filter_secure_image_alter" from filter module could be used to do this; however did not get any examples on how to exactly do that. (Or even whether such a possibility exists)