Closed (fixed)
Project:
Drupal.org security advisory coverage applications
Component:
module
Priority:
Normal
Category:
Task
Assigned:
Unassigned
Reporter:
Created:
2 Dec 2011 at 11:15 UTC
Updated:
23 Jul 2013 at 23:31 UTC
This module give the ability to manually invoke resource operations callbacks defined by Services 3.x compatible modules as Services 2.x provided out-of-the-box for defined services callbacks.
No implementation was found in current Services 3.x release so this module provide a optional UI to achieve this goal. This is a d7 implementation only for now.
Sandbox : http://drupal.org/sandbox/garphy/1358780
Git : http://drupalcode.org/sandbox/garphy/1358780.git (please use 7.x-1.x branch)
Reviewed projects :
Comments
Comment #1
patrickd commentedReview of the 7.x-1.x branch:
This automated report was generated with PAReview.sh, your friendly project application review script. Go and review some other project applications, so we can get back to yours sooner.
Source: http://ventral.org/pareview - PAReview.sh online service
Comment #2
garphyUpdated the code to add missing docs.
Comment #4
garphyCleaned up remaining coding convention needs.
Renamed the issue to match the real name of the module.
PAreview now yield nothing.
Comment #5
patrickd commentedYour README.txt is a little too simple ;-)
Please have a look at other readmes and have a look at http://drupal.org/node/447604 (readme styles)
There's a lack of inline comments, please tell other developers what you're doing and why your doing it. So we don't have to re-think your thoughts
Line 84. First, why your doing this twice? Second, why your doing this anyway? As services is a dependency of your module this is not necessary (or ? - good example for missing code documentation)
You also got a security issue in your module (XSS Cross Site Scripting, by printing out unescaped code)
drupal_set_title(t('Resource !resource_name, operation !operation_name', array('!resource_name' => $resource_name, '!operation_name' => $operation_name)));Your printing out
!operation_name(you probably know that the!returns unescaped output and@is check_plained). But the values you get from your path (admin/structure/servicesbrowser/operation/%/%) are not filtered yet!Your also not checking whether the keys your getting exists ($resources[$resource_name][$operation_name]). If I manipulate the values in the URL an error will be thrown:
Notice: Undefined index: create in services_browser_operation_page() (line 130 of /srv/www/htdocs/drupal-7-test/sites/all/modules/services_browser/services_browser.module).So you have to check for they keys first, react with a fitting error message and abort further building of the page.
There's probably more, but it makes no sense for me reviewing nearly non-commented code, sorry.
regards
Comment #6
garphyMany thanks for your review. That's precious code quality advices !
Comment #7
misc commentedThis project application has been marked as needs work for 17 weeks, and there is no possibility to contact the user. I am closing this.
@garphy, if this is wrong, please reopen.
Comment #8
garphyWell I'm working on polishing that amongst other tasks. That take time, but I hope I'll be able to commit something to review in the following weeks.
Comment #9
klausiClosing due to lack of activity. Feel free to reopen if you are still working on this application.
Comment #10
garphyI finally found some time to incorporate fixes from previous remarks.
PAreview is now cleared from issues.
I also revamped some parts as Services provides a more robust API to access defined resources.
(I know, I need a bonus...)
Comment #11
PA robot commentedWe are currently quite busy with all the project applications and we prefer projects with a review bonus. Please help reviewing and we will take a look at your project right away :-)
Also, you should get your friends, colleagues or other community members involved to review this application. Let them go through the review checklist and post a comment that sets this issue to "needs work" (they found some problems with the project) or "reviewed & tested by the community" (they found no major flaws).
I'm a robot and this is an automated message from Project Applications Scraper.
Comment #12
davidam commentedI've found some warnings in your code:
Comment #13
kscheirerYour installation instructions are not very good - "Place the module in the sites/SITENAME/module and enable it." may confuse people, since I think most folks install modules into sites/all/modules or sites/all/modules/contrib.
You can simplify your code in services_browser_unserialize_argument() - if $value is empty() you are returning NULL in all 3 cases. Just check for that first, before the switch statement. In your theme function, you should pass the $header values through t() so they can be translated as well.
These are pretty minor issues though, marking RTBC.
Comment #14
kscheirerNo additional problems found, you've been waiting long enough - thanks for sticking with the process! The module is clean and simple.
Thanks for your contribution, garphy!
I updated your account to let you promote this to a full project and also create new projects as either a sandbox or a "full" project.
Here are some recommended readings to help with excellent maintainership:
You can find lots more contributors chatting on IRC in #drupal-contribute. So, come hang out and get involved!
Thanks, also, for your patience with the review process. Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.
Thanks to the dedicated reviewer(s) as well.
----
Top Shelf Modules - Enterprise modules from the community for the community.
Comment #15.0
(not verified) commentedkeep track of a review comment url