- Log in or register to create an issue
- Advanced search
| Title | Status | Priority | Category | Version | Component | Replies |
Last updated |
Assigned to | Created |
|---|---|---|---|---|---|---|---|---|---|
| How to set httpOnly flag on cookies? | Closed (works as designed) | Normal | Support request | 2.0.1 | Documentation | 7 | 1 week 1 day | 2 years 11 months | |
| "Directive style-src-elem violated." | Closed (outdated) | Normal | Feature request | 7.x-1.x-dev | Code | 25 | 1 week 1 day | 6 years 1 month | |
| Update CSP directives | Closed (duplicate) | Normal | Feature request | 2.x-dev | Code | 12 | 1 week 1 day | 9 years 1 day | |
| object-src and script-src directives should have a default value | Needs review | Normal | Feature request | 2.x-dev | Code | 9 | 1 week 1 day | barone | 4 years 7 months |
| [META] Roadmap to new release | Active | Normal | Feature request | 2.x-dev | Code | 5 | 1 week 1 day | 6 months 1 week | |
| Changing configuration should invalidate http_response cache tag | Needs review | Normal | Feature request | 2.x-dev | Code | 5 | 1 week 3 days | 2 months 3 weeks | |
| Add support for the CSP worker-src directive | Needs review | Normal | Feature request | 2.x-dev | Code | 11 | 1 week 4 days | 2 years 6 months | |
| Avoid using document.write('<!--'); | Needs review | Normal | Task | 2.x-dev | Code | 44 | 1 week 4 days | 5 years 8 months | |
| Add support for the Cross-Origin-Opener-Policy (COOP) header | Needs work | Normal | Feature request | 2.x-dev | Code | 9 | 1 week 4 days | 1 year 2 months | |
| Add form-action directive | Needs review | Normal | Feature request | 2.x-dev | Code | 24 | 1 week 4 days | 5 years 3 months | |
| Add missing config schema definitions for X-XSS-Protection options in Seckit | Needs work | Normal | Bug report | 2.x-dev | Code | 5 | 1 week 4 days | 9 months 4 weeks | |
| CSP: Directive script-src-elem violated with googletagmanager | Closed (won't fix) | Normal | Support request | 2.x-dev | Code | 25 | 1 week 4 days | 5 years 6 months | |
| Add worker-src | Closed (outdated) | Normal | Feature request | 7.x-1.x-dev | Code | 14 | 1 week 4 days | 4 years 2 months | |
| Drupal 9.1 Deprecated Code Report | Closed (outdated) | Normal | Task | 2.x-dev | Code | 19 | 1 week 4 days | sourabhjain | 5 years 9 months |
| Add Permissions Policy to configurable options | Needs work | Normal | Feature request | 2.x-dev | Code | 40 | 1 week 4 days | 5 years 10 months | |
| text about drupal 6 | Reviewed & tested by the community | Minor | Bug report | 2.x-dev | Documentation | 13 | 1 week 4 days | 10 months 3 weeks | |
| Misleading recommendation for CSP directive "frame-src" | Closed (outdated) | Normal | Task | 7.x-1.x-dev | Documentation | 6 | 1 week 4 days | 3 years 5 months | |
| Fix D7 Forms API syntax | Closed (outdated) | Normal | Bug report | 7.x-1.x-dev | Code | 7 | 1 week 4 days | 3 years 2 months | |
| Provide hook_seckit_options_alter() D8 | Needs work | Major | Feature request | 2.x-dev | Code | 30 | 1 week 5 days | 9 years 9 months | |
| Implement a "semi automatic" Nonce settings | Needs review | Normal | Feature request | 2.x-dev | Miscellaneous | 32 | 1 month 4 days | 4 years 11 months | |
| Automated Drupal 12 compatibility fixes for seckit 2.x-dev | Needs review | Normal | Task | 2.x-dev | Code | 5 | 3 months 3 days | 3 months 4 weeks | |
| FF gives 'unbalanced tree' warnings because of deprecated document.write usage. | Closed (duplicate) | Normal | Bug report | 2.0.3 | Code | 4 | 3 months 2 weeks | 3 months 2 weeks | |
| Breaks sitemap.xml when JS +CSS + Noscript protection is enabled | Needs review | Normal | Bug report | 2.0.0 | Code | 11 | 4 months 2 weeks | 5 years 3 months | |
| Add support for the CSP worker-src directive | Closed (duplicate) | Normal | Feature request | 2.x-dev | Code | 6 | 4 months 2 weeks | 4 months 2 weeks | |
| Add Tugboat support | Needs review | Normal | Task | 2.x-dev | Code | 3 | 6 months 1 week | 6 months 1 week | |
| Add support for form-action directive | Closed (duplicate) | Normal | Feature request | 2.x-dev | Code | 8 | 6 months 1 week | 1 year 5 months | |
| fix gaps in automated test coverage | Needs review | Normal | Task | 2.0.3 | Code | 3 | 6 months 2 weeks | 6 months 2 weeks | |
| Support for configuring script-src-elem | Active | Normal | Feature request | 2.x-dev | Code | 6 | 6 months 3 weeks | 1 year 6 months | |
| ALLOW-FROM directive in x-frame-options is obsolete | Active | Normal | Bug report | 2.0.0 | Code | 5 | 7 months 5 days | 3 years 11 months | |
| Remove the term whitelist* from the module | Needs review | Normal | Task | 2.0.3 | Code | 13 | 8 months 3 days | 1 year 2 months | |
| Add trusted-type and require-trusted-type-for directives to the CSP | Needs review | Normal | Feature request | 2.x-dev | Code | 3 | 8 months 1 week | 8 months 1 week | |
| Support flood control for CSP violation reports | Needs work | Major | Task | 8.x-1.x-dev | Code | 66 | 8 months 2 weeks | kmoll | 10 years 6 months |
| Offering to co-maintain SecKit | Closed (fixed) | Normal | Support request | 2.x-dev | Miscellaneous | 7 | 8 months 3 weeks | 9 months 1 week | |
| Enabling "Enable JavaScript + CSS + Noscript protection" causes invalid HTML | Needs work | Normal | Bug report | 2.x-dev | Code | 24 | 8 months 3 weeks | 7 years 3 months | |
| noscript in head tag causing HTML Validation issues | Active | Major | Bug report | 2.0.0 | Code | 2 | 8 months 3 weeks | 4 years 4 months | |
| report-uri is deprecated | Needs work | Normal | Bug report | 2.x-dev | Code | 14 | 9 months 1 week | 3 years 5 months | |
| Add manifest-src | Needs work | Normal | Feature request | 2.0.0 | Code | 4 | 9 months 1 week | 5 years 6 months | |
| The base-uri policy is missing | Needs review | Normal | Bug report | 2.x-dev | Code | 42 | 9 months 1 week | 6 years 10 months | |
| Missing CSP directives | Closed (duplicate) | Normal | Feature request | 2.x-dev | Code | 4 | 9 months 1 week | 1 year 3 weeks | |
| Add support for form-action CSP directive | Closed (duplicate) | Normal | Feature request | 7.x-1.x-dev | Code | 5 | 9 months 1 week | 8 years 9 months | |
| JavaScript + CSS + Noscript protection can cause Javascript errors | Active | Normal | Bug report | 2.x-dev | Code | 2 | 12 months 3 days | 12 months 3 days | |
| Store each CSP rule on a seperate line in config | Closed (duplicate) | Normal | Feature request | 2.x-dev | Code | 3 | 1 year 2 weeks | 2 years 5 months | |
| cspell issues reported in pipeline | Active | Normal | Task | 2.x-dev | Code | 4 | 1 year 2 months | 1 year 2 months | |
| Implement the script-src-attr policy | Needs review | Normal | Feature request | 2.x-dev | Code | 7 | 1 year 4 months | 4 years 6 months | |
| Need to exclude admin path from applying the policies | Closed (won't fix) | Normal | Feature request | 2.x-dev | Code | 12 | 1 year 4 months | 2 years 5 months | |
| User interface improvements | Active | Minor | Feature request | 2.0.3 | User interface | 4 | 1 year 4 months | 1 year 5 months | |
| Offering to maintain Security Kit | Closed (outdated) | Normal | Support request | 2.x-dev | Miscellaneous | 11 | 1 year 4 months | 3 years 10 months | |
| Extend length of src fields | Needs review | Major | Feature request | 2.0.0 | Code | 9 | 1 year 5 months | 5 years 6 months | |
| Add support for form-action directive | Closed (duplicate) | Normal | Feature request | 2.x-dev | Code | 7 | 1 year 5 months | 1 year 5 months | |
| default-src has wrong description | Needs review | Major | Bug report | 2.x-dev | Documentation | 17 | 1 year 7 months | 5 years 8 months |
Pages
Subscribe with RSS 