We ran Burp Suite on a Drupal 8.8.5 installation just before deployment and it found lots of vulnerabilities in the Search API with Facets page. Anybody who has mitigation steps to this issue? Here's the error message straight from the Burp tool.
Issue detail
It is possible to induce the application to retrieve the contents of an arbitrary external URL and return those contents in its own response.
The payload yacg28uhiohp0skgm808470da4gy41zpsfg53vrk.burpcollaborator.net was submitted in the HTTP Host header.
I have the actual Drupal 8 and I want to provide a website. On this website I will have different types of users (like standard user, premium user etc.). This user types should have some different restricted access to the content.
I had find on many site the recommendation to use the module "content access", but the last update is from 2017 and the module have some unfixed security issues. https://www.drupal.org/project/content_access
I've managed a site in Drupal, through the changes from D6 to D7 and to D8.
Now I've been asked to "refresh" the site with a brand new installation in D8, to get rid of old contents, and to give a more "modern" look
So I have imported all the users and the important pages, and now I'm struggling recreating the menus.. and here come the problems: it appears that ONLY the Main Navigation menu is showing up correctly as a drops down menu in the "Primary Menu" region; the others menu appear just as "normal menus", with all the links listed
I have created a custom content type with a field ('field_table_2') that is a (list of) paragraph element reference entity.
The paragraph entity, contains 'select' fields (e.g. 'field_rsn', 'field_added', 'field_deleted' ), that we need to hide or show according to selection.
We are reading about Conditional-form-fields, but we cannot find a way to refer to the subform field, eg.:
Which are the best themes to use while experimenting with Drupal? I've installed a few but they really don't look good at all. I've browsed through the themes here but it's a long and painful process. I don't want to develop my own theme as I'm more learning about Drupal's features. Working on a theme would be a future task, if it becomes necessary. Cheers
I'm creating a custom content type and I want to add a field that references a forum container. Is this possible?
Is it also possible to automatically create a forum container when an instance of a custom content type is created? Or do I need to create a module for this?