Displaying 1 - 50 of 121
Title Status Priority Category Version Component Replies Last updatedsort ascending Assigned to Created
object-src and script-src directives should have a default value Needs review Normal Feature request 2.x-dev Code 9 3 days 23 hours barone 4 years 7 months
[META] Roadmap to new release Active Normal Feature request 2.x-dev Code 5 4 days 10 hours 6 months 1 week
Changing configuration should invalidate http_response cache tag Needs review Normal Feature request 2.x-dev Code 5 6 days 13 hours 2 months 2 weeks
Add support for the CSP worker-src directive Needs review Normal Feature request 2.x-dev Code 11 6 days 20 hours 2 years 6 months
Avoid using document.write('<!--'); Needs review Normal Task 2.x-dev Code 44 6 days 21 hours 5 years 8 months
Add support for the Cross-Origin-Opener-Policy (COOP) header Needs work Normal Feature request 2.x-dev Code 9 6 days 22 hours 1 year 2 months
Add form-action directive Needs review Normal Feature request 2.x-dev Code 24 1 week 6 hours 5 years 3 months
Add missing config schema definitions for X-XSS-Protection options in Seckit Needs work Normal Bug report 2.x-dev Code 5 1 week 12 hours 9 months 3 weeks
Add Permissions Policy to configurable options Needs work Normal Feature request 2.x-dev Code 40 1 week 12 hours 5 years 10 months
text about drupal 6 Reviewed & tested by the community Minor Bug report 2.x-dev Documentation 13 1 week 12 hours 10 months 3 weeks
Provide hook_seckit_options_alter() D8 Needs work Major Feature request 2.x-dev Code 30 1 week 15 hours 9 years 8 months
Implement a "semi automatic" Nonce settings Needs review Normal Feature request 2.x-dev Miscellaneous 32 1 month 6 hours 4 years 11 months
Automated Drupal 12 compatibility fixes for seckit 2.x-dev Needs review Normal Task 2.x-dev Code 5 2 months 4 weeks 3 months 3 weeks
Breaks sitemap.xml when JS +CSS + Noscript protection is enabled Needs review Normal Bug report 2.0.0 Code 11 4 months 1 week 5 years 3 months
Add Tugboat support Needs review Normal Task 2.x-dev Code 3 6 months 5 days 6 months 5 days
fix gaps in automated test coverage Needs review Normal Task 2.0.3 Code 3 6 months 2 weeks 6 months 2 weeks
Support for configuring script-src-elem Active Normal Feature request 2.x-dev Code 6 6 months 3 weeks 1 year 6 months
ALLOW-FROM directive in x-frame-options is obsolete Active Normal Bug report 2.0.0 Code 5 7 months 1 day 3 years 10 months
Remove the term whitelist* from the module Needs review Normal Task 2.0.3 Code 13 7 months 4 weeks 1 year 1 month
Add trusted-type and require-trusted-type-for directives to the CSP Needs review Normal Feature request 2.x-dev Code 3 8 months 1 week 8 months 1 week
Support flood control for CSP violation reports Needs work Major Task 8.x-1.x-dev Code 66 8 months 2 weeks kmoll 10 years 6 months
Enabling "Enable JavaScript + CSS + Noscript protection" causes invalid HTML Needs work Normal Bug report 2.x-dev Code 24 8 months 2 weeks 7 years 3 months
noscript in head tag causing HTML Validation issues Active Major Bug report 2.0.0 Code 2 8 months 3 weeks 4 years 4 months
report-uri is deprecated Needs work Normal Bug report 2.x-dev Code 14 9 months 5 days 3 years 5 months
Add manifest-src Needs work Normal Feature request 2.0.0 Code 4 9 months 5 days 5 years 6 months
The base-uri policy is missing Needs review Normal Bug report 2.x-dev Code 42 9 months 6 days 6 years 10 months
JavaScript + CSS + Noscript protection can cause Javascript errors Active Normal Bug report 2.x-dev Code 2 11 months 4 weeks 11 months 4 weeks
cspell issues reported in pipeline Active Normal Task 2.x-dev Code 4 1 year 1 month 1 year 2 months
Implement the script-src-attr policy Needs review Normal Feature request 2.x-dev Code 7 1 year 3 months 4 years 6 months
User interface improvements Active Minor Feature request 2.0.3 User interface 4 1 year 4 months 1 year 5 months
Extend length of src fields Needs review Major Feature request 2.0.0 Code 9 1 year 4 months 5 years 6 months
default-src has wrong description Needs review Major Bug report 2.x-dev Documentation 17 1 year 7 months 5 years 8 months
How to add all google tlds for CSP Active Normal Support request 2.0.0 User interface 10 1 year 7 months 4 years 3 months
Google URL's are blocked. Active Major Support request 2.0.1 Miscellaneous 5 1 year 7 months 2 years 8 months
Seckit seckitGetJsCssNoscriptCode hijacks js aggregation files. Needs work Normal Bug report 2.x-dev Code 9 1 year 10 months 2 years 5 months
Allow certain paths to be excluded from the Origin check (patch included) Needs review Normal Feature request 2.0.0 Code 4 1 year 10 months 5 years 7 months
Dispatch an event when there is a CSP violation Needs review Normal Feature request 2.x-dev Code 3 1 year 10 months 1 year 10 months
Missing container invalidation update from issue modifying services Active Normal Bug report 2.x-dev Code 8 2 years 4 days 2 years 1 month
Clickjacking CSS protection hides content when site is embed inside an iframe, even if frame-ancestors is set Needs review Normal Bug report 2.0.1 Code 9 2 years 1 week 2 years 8 months
Update summary on project page for compatibility with Project Browser Active Normal Task 2.0.3 Miscellaneous 1 2 years 1 week 2 years 1 week
Update logo for compatibility with Project Browser Active Normal Task 2.0.3 Miscellaneous 1 2 years 1 week 2 years 1 week
Modernize services: Add autowiring aliases, use autoconfigure, etc Needs review Normal Task 2.x-dev Code 6 2 years 3 weeks 2 years 3 weeks
Multiple html lines of seckitGetJsCssNoscriptCode function create issue when js aggregate and minify html is on Active Normal Bug report 2.0.1 Code 2 2 years 3 weeks hetalsagar 2 years 3 weeks
Silent mode for CSP reporting Active Normal Feature request 2.x-dev Code 4 2 years 1 month 4 years 5 months
Store CSP sources as a list of values on multiple lines to increase manageability and prevent merge conflicts Needs review Normal Feature request 2.x-dev Code 13 2 years 1 month 2 years 11 months
Question about HSTS max-age Active Normal Support request 2.0.1 Miscellaneous 2 2 years 4 months 2 years 6 months
Add phpcs and drupal-check fixes Needs review Normal Task 2.x-dev Code 34 2 years 5 months 4 years 7 months
t() calls should be avoided in classes. Needs review Normal Task 2.0.1 Code 2 2 years 7 months 2 years 7 months
\Drupal calls should be avoided in classes, use dependency injection instead Needs review Normal Task 2.0.1 Code 2 2 years 7 months 2 years 7 months
Add support for setting referer policy from route in issue #3027122 Needs work Normal Feature request 2.x-dev Code 3 2 years 8 months gordon 5 years 2 months

Pages

Subscribe with RSS Subscribe to Issues for Security Kit