Help protect the website from attackers or bad actors, by identifying, preventing, or mitigating security vulnerabilities.

Image Allow Insecure Derivatives

Provides a user interface to allow Drupal to bypass the token security check when generating image derivatives.

Enkoder for Drupal

Want to guard against spam? Want to make sure sensitive information isn't easily nabbed by an automated script?

Use Enkoder for Drupal! This uses the logic behind Hivelogic's Enkoder to encode any field or arbitrary text in a recursively self-evaluating block of javascript, foiling all but the hardiest of spambots.

You can use this to harden any text-based field and this module also exposes a general-purpose php function (sclib_enkoder) for your own custom uses.

This module is supported by time from the Sierra Club.

Why use this?

In my examination of the Drupal module landscape, SPAM-hardening solutions either tend to be focused on forms (like CAPTCHA) or provide very limited email encoding (such as by providing HTML entity encoding or exposing an input filter).

By using this module, you

  1. can arbitrarily harden any core text field, even ones that don't use an input filter
  2. can arbitrarily harden any text, not just things look like email addresses.

Null byte prevention

This module takes any form input on a Drupal site and removes NULL byte poisoning from it.

403 to 404

403 to 404 is a simple module that emits a 404 error when a user tries to access a page that they don't have permission to view.

Node Access Priority

This module restores the Priority feature of Node Access that was removed in Drupal 8.

This module is not yet functional! Patches are welcome!

Pages

Subscribe with RSS Subscribe to RSS - Security