|
Title field does not behave as a field |
needs review |
critical |
bug reports |
7.x-dev |
node system |
|
|
Text formats expose sensitive information and arbitrary user input if filters vanish |
needs review |
critical |
bug reports |
7.x-dev |
filter.module |
sun |
|
Introduce Form API #type 'text_format' |
needs review |
critical |
bug reports |
7.x-dev |
forms system |
sun |
|
Empty admin categories are not hidden |
needs work |
critical |
bug reports |
7.x-dev |
menu system |
|
|
Impersonation when an https session exists. |
fixed |
critical |
bug reports |
7.x-dev |
base system |
|
|
subselect in WHERE condition with multiple placeholders cause invalid/duplicate placeholders |
fixed |
critical |
bug reports |
7.x-dev |
database system |
mcarbone |
|
Categories below "Configuration and modules" |
needs work |
critical |
bug reports |
7.x-dev |
base system |
|
|
Upgrade path for D6 CCK fields |
active |
critical |
bug reports |
7.x-dev |
field system |
|
|
Disappearing edit tabs due to input format permissions. |
needs work |
critical |
bug reports |
7.x-dev |
filter.module |
|
|
Fix bugs in https support and force using https for authorize.php if available |
needs work |
critical |
tasks |
7.x-dev |
base system |
dww |
|
Warn about potentially insecure filter configurations |
needs review |
critical |
tasks |
7.x-dev |
filter.module |
|
|
Fix obvious security issues in HEAD before an alpha/beta - meta issue |
active |
critical |
bug reports |
7.x-dev |
base system |
|
|
Add a UI for if the site supports https |
active |
critical |
tasks |
7.x-dev |
base system |
Dave Reid |
|
Allow jQuery UI themes to be swappable |
needs work |
critical |
bug reports |
7.x-dev |
javascript |
|
|
Make custom blocks fieldable |
needs work |
critical |
bug reports |
7.x-dev |
block.module |
|
|
Allow update.php to regenerate settings.php |
closed |
critical |
tasks |
7.x-dev |
update system |
|