Displaying 1 - 30 of 30
Title Status Priority Category Version Component Replies Last updatedsort ascending Assigned to Created
Integrate health check functionality Fixed Minor Feature request 1.x-dev Code 11 10 hours 16 min 1 month 1 week
Add a summary block / indicator for the frontend in production Fixed Normal Feature request 1.x-dev Code 27 10 hours 17 min 3 months 3 weeks
Email alert if some important checks fail Active Normal Feature request 1.x-dev Code 1 12 hours 5 min 12 hours 5 min
Entity health checks? Fixed Normal Feature request 1.x-dev Code 5 15 hours 16 min 3 weeks 6 days
Fatal error: Allowed memory size exhausted in CacheAnalyzer::readCacheTagsFromDatabase() on sites with large cachetags table Fixed Normal Bug report 1.0.11 Code 9 15 hours 50 min 1 month 6 days
Add a flag (setting) to mark an audit "resolved" Fixed Normal Feature request 1.x-dev Code 8 16 hours 42 min 3 months 3 weeks
CACHE_MAX_AGE_ZERO is an error in controllers that only serve administration pages, where max-age 0 is often the correct cacheability Fixed Normal Bug report 1.x-dev Code 4 2 days 8 hours trebormc 2 days 8 hours
Site-level performance findings should say when a value comes from a settings.php override instead of the stored configuration Fixed Normal Bug report 1.x-dev Code 4 2 days 8 hours trebormc 2 days 8 hours
MARKUP_WITHOUT_CACHE flags MarkupInterface value objects, static strings and classes that use the cacheable metadata API Fixed Normal Bug report 1.x-dev Code 4 2 days 9 hours trebormc 2 days 9 hours
LOAD_BY_PROPERTIES warns about bypassing access on sites where entity queries have no access rules; only report entity types with active query access Fixed Normal Bug report 1.x-dev Code 4 2 days 9 hours trebormc 2 days 9 hours
STATIC_SERVICE_IN_LOOP flags \Drupal::service() calls whose service ID depends on the loop and cannot be moved out of it Fixed Normal Bug report 1.x-dev Code 4 2 days 9 hours trebormc 2 days 9 hours
SAVE_IN_LOOP reports configuration object saves ($config->save()) as entity saves Fixed Normal Bug report 1.x-dev Code 4 2 days 9 hours trebormc 2 days 9 hours
QUERY_NO_RANGE / DB_SELECT_NO_LIMIT flag count queries and queries restricted to one entity ID, and can take the range() of the next query Fixed Normal Bug report 1.x-dev Code 4 2 days 9 hours trebormc 2 days 9 hours
LOAD_MULTIPLE_ALL flags loadMultiple() on config entity storages; resolve the entity type and skip config entity types Fixed Normal Bug report 1.x-dev Code 4 2 days 9 hours trebormc 2 days 9 hours
concatenated_query flags concatenation in ->condition() and in placeholder values, which cannot inject, and misses interpolated or sprintf() SQL strings Fixed Normal Bug report 1.x-dev Code 4 2 days 9 hours trebormc 2 days 9 hours
direct_db_connection matches \Drupal::database() inside strings and reports it as a warning with a misleading message; it is a review hint about entity access Fixed Normal Bug report 1.x-dev Code 4 2 days 9 hours trebormc 2 days 9 hours
render_array_markup_xss reports every variable assigned to '#markup' as an XSS error, but the renderer filters strings; only Markup::create() values and raw user input are risky Fixed Normal Bug report 1.x-dev Code 4 2 days 9 hours trebormc 2 days 9 hours
t_function_xss flags every t() call with an '@' placeholder; '@' is the placeholder that escapes its value Fixed Normal Bug report 1.x-dev Code 4 2 days 9 hours trebormc 2 days 10 hours
FIELDS_NON_TABLE is reported on entity_reference displays, which can only use the fields-based entity_reference style and row Fixed Normal Bug report 1.x-dev Code 4 2 days 10 hours trebormc 2 days 10 hours
CACHE_TAG_GENERIC recommendation ignores relationships: it must say which list tags to keep, and it is wrong when a relationship reaches the base entity type Fixed Normal Bug report 1.x-dev Code 4 2 days 10 hours trebormc 2 days 10 hours
Switching a view to Advanced Views Cache silences CACHE_TAG_GENERIC even when no cache tag was changed (false negative), and excluding the list tag without a bundle tag is not reported Fixed Normal Bug report 1.x-dev Code 4 2 days 10 hours trebormc 2 days 10 hours
CACHE_TAG_GENERIC suggests bundle cache tags for exposed and "not in" bundle filters, where the generic list tag is the correct one Fixed Normal Bug report 1.x-dev Code 4 2 days 10 hours trebormc 2 days 10 hours
Core media_library widget displays are always reported as ANON_ACCESS_ADMIN; add a built-in default and an access_excluded_views setting Fixed Normal Bug report 1.x-dev Code 4 2 days 10 hours trebormc 2 days 10 hours
Anonymous access checks of the Views analyzer ignore that an attachment display is only shown with the display it is attached to Fixed Normal Bug report 1.x-dev Code 4 2 days 10 hours trebormc 2 days 10 hours
ADMIN_BASE_TABLES turns every taxonomy term and user view into an admin view, producing ANON_ACCESS_ADMIN errors on frontend blocks such as who_s_new Fixed Normal Bug report 1.x-dev Code 4 2 days 11 hours trebormc 2 days 11 hours
isAdminView() view id prefix list matches frontend core views (content_recent, taxonomy_term) Fixed Normal Bug report 1.x-dev Code 4 2 days 11 hours trebormc 2 days 11 hours
ViewsAnalyzer::isAdminView() compares '/admin' against Views paths that have no leading slash, so admin pages are classified as frontend Fixed Normal Bug report 1.x-dev Code 4 2 days 11 hours trebormc 2 days 11 hours
Security static scanner reports code inside trailing // comments and /* */ comments because it only skips lines that start with a comment marker Fixed Normal Bug report 1.x-dev Code 4 2 days 11 hours trebormc 2 days 11 hours
Delete old branch audit 5.x-1.x-dev Postponed Normal Task 5.x-1.x-dev Miscellaneous 5 1 month 2 weeks 1 month 3 weeks
Opt into Drupal’s security advisory policy. Active Normal Task 1.x-dev Code 4 1 month 3 weeks 3 months 2 weeks
Subscribe with RSS Subscribe to Issues for Drupal Site Audit