|
Content-Security-Policy |
Add GraphQL support |
Active |
Normal |
Feature request |
2.x-dev |
|
6 days 16 hours |
|
Content-Security-Policy |
Add a csp_nonce() Twig function that stays correct with Dynamic Page Cache |
Needs review |
Normal |
Task |
2.x-dev |
|
2 weeks 4 days |
|
Content-Security-Policy |
Extend API to easily handle non-bubbleable #attached[csp...] scenarios |
Needs work |
Normal |
Feature request |
2.x-dev |
|
1 month 2 weeks |
|
Attach Inline |
Automated Drupal 12 compatibility fixes for attachinline 1.x-dev |
Active |
Normal |
Task |
8.x-1.x-dev |
|
3 months 4 weeks |
|
Permissions Policy |
Automated Drupal 12 compatibility fixes for permissionspolicy 1.x-dev |
Active |
Normal |
Task |
1.x-dev |
|
3 months 4 weeks |
|
Content-Security-Policy |
Make auto sources configurable |
Needs review |
Normal |
Feature request |
8.x-1.x-dev |
|
4 years 9 months |
|
Permissions Policy |
Update features list |
Active |
Normal |
Task |
1.x-dev |
|
2 years 5 months |
|
Reporting API |
Automated Drupal 12 compatibility fixes for reporting 2.x-dev |
Active |
Normal |
Task |
2.x-dev |
|
3 months 2 weeks |
|
Content-Security-Policy |
Automated Drupal 12 compatibility fixes for csp 2.x-dev |
Active |
Normal |
Task |
2.x-dev |
|
4 months 3 days |
|
Persistent Login |
Automated Drupal 12 compatibility fixes for persistent_login 2.x-dev |
Needs review |
Normal |
Task |
2.x-dev |
|
3 months 4 weeks |
|
Content-Security-Policy |
Missing titles on admin form |
Needs review |
Normal |
Bug report |
2.x-dev |
|
3 months 4 weeks |
|
Content-Security-Policy |
Remove X-Frame-Options Header |
Active |
Normal |
Task |
2.x-dev |
|
2 years 6 months |
|
Content-Security-Policy |
Provides a filter to add nonce attribute to inline scripts. |
Needs work |
Normal |
Feature request |
2.x-dev |
|
2 years 9 months |
|
Content-Security-Policy |
Validate directive names in configuration |
Active |
Minor |
Task |
2.x-dev |
|
2 years 1 month |
|
Content-Security-Policy |
Option to use strict-dynamic for scripts |
Postponed |
Normal |
Task |
2.x-dev |
|
1 year 7 months |
|
Content-Security-Policy |
Update tests |
Active |
Normal |
Plan |
2.x-dev |
|
5 months 2 weeks |
|
Content-Security-Policy |
Config overrides cause PHP warning and missing link text |
Active |
Normal |
Bug report |
2.x-dev |
|
1 year 5 months |
|
Content-Security-Policy |
Remove code for Firefox bug 1313937 |
Reviewed & tested by the community |
Minor |
Task |
2.x-dev |
|
2 years 9 months |
|
Content-Security-Policy |
'directives' is a required key. |
Needs review |
Normal |
Bug report |
2.x-dev |
|
1 year 4 months |
|
Content-Security-Policy |
Only add header to relevant responses |
Reviewed & tested by the community |
Normal |
Task |
2.x-dev |
|
7 years 11 months |
|
Persistent Login |
Provide a permission for users to see "Persistent Logins" tab in their profiles |
Reviewed & tested by the community |
Major |
Feature request |
2.x-dev |
|
9 years 2 months |
|
Persistent Login |
Integration with OpenID login |
Postponed |
Normal |
Feature request |
2.x-dev |
|
14 years 9 months |
|
Content-Security-Policy |
Reporting URI handler does not allow relative/local URIs |
Active |
Normal |
Feature request |
2.x-dev |
|
11 months 3 weeks |
|
Content-Security-Policy |
Allow script / style by nonce |
Active |
Normal |
Feature request |
8.x-1.x-dev |
|
7 years 5 days |
|
Attach Inline |
Render Element for Inline JS / CSS |
Active |
Normal |
Feature request |
8.x-1.x-dev |
|
6 years 10 months |
|
Attach Inline |
Same javascript code can be attached multiple times causing duplication |
Needs review |
Normal |
Bug report |
8.x-1.x-dev |
hannahdigidev |
1 year 1 month |
|
Content-Security-Policy |
Prioritise visibility of enabled policy types on configuration page loads |
Needs review |
Normal |
Feature request |
2.x-dev |
|
1 year 1 month |
|
Content-Security-Policy |
TypeError: Drupal\Core\Routing\CurrentRouteMatch::getRouteMatch(): Argument #1 ($request) must be of type Symfony\Component\HttpFoundation\Request, null given, called in /var/www/html/web/core/lib/Drupal/Core/Routing/CurrentRouteMatch.php |
Active |
Normal |
Bug report |
2.x-dev |
|
1 year 2 months |
|
Content-Security-Policy |
Core Toolbar anti-flicker script adds inline style |
Active |
Normal |
Plan |
2.x-dev |
|
2 years 1 month |
|
Reporting API |
Handle CORS preflight request |
Active |
Normal |
Bug report |
2.x-dev |
|
1 year 5 months |
|
Content-Security-Policy |
Refactor policy config to config entities |
Active |
Normal |
Task |
2.x-dev |
|
1 year 5 months |
|
Persistent Login |
Circular dependency in persistent_login module causes ServiceCircularReferenceException |
Active |
Normal |
Bug report |
2.x-dev |
|
1 year 5 months |
|
Persistent Login |
Improve description for "Maximum Tokens" setting |
Needs review |
Minor |
Bug report |
2.x-dev |
|
1 year 8 months |
|
Content-Security-Policy |
The Content-Security-Policy module is missing a README, which serves as documentation. |
Needs review |
Normal |
Task |
2.x-dev |
|
2 years 1 month |
|
Content-Security-Policy |
Add config validation constraint for source list flags |
Postponed |
Minor |
Task |
2.x-dev |
|
2 years 1 month |
|
Content-Security-Policy |
Enable specifying additional directives in library definitions |
Active |
Normal |
Feature request |
2.x-dev |
|
2 years 4 months |
|
Content-Security-Policy |
Show current policy on config form |
Active |
Normal |
Feature request |
2.x-dev |
|
2 years 1 month |
|
Content-Security-Policy |
Create and use Enum classes internally |
Needs review |
Normal |
Task |
2.x-dev |
|
2 years 1 month |
|
Content-Security-Policy |
Project Browser: Create a logo for Content-Security-Policy |
Needs review |
Normal |
Task |
2.x-dev |
|
2 years 3 months |
|
Content-Security-Policy |
Use Enums |
Active |
Normal |
Plan |
2.x-dev |
|
2 years 1 month |
|
Persistent Login |
[D8] Require password authentication before accessing sensitive pages |
Needs work |
Normal |
Feature request |
2.x-dev |
|
10 years 3 months |
|
Attach Inline |
Add hashes if directive already has hash or nonce |
Needs work |
Normal |
Bug report |
8.x-1.x-dev |
|
4 years 9 months |
|
Attach In-Body |
Automated Drupal 11 compatibility fixes for attachinbody |
Needs review |
Normal |
Task |
8.x-1.x-dev |
|
2 years 4 months |
|
Reporting API |
Create report storage handler |
Active |
Normal |
Task |
2.x-dev |
|
8 years 1 month |
|
Attach Inline |
[upstream] html_response.attachments_processor service must be replaced instead of decorated |
Postponed |
Normal |
Task |
8.x-1.x-dev |
|
6 years 10 months |
|
Attach Inline |
Use helper functions to add hashes and nonces |
Postponed |
Normal |
Task |
8.x-1.x-dev |
|
2 years 4 months |
|
Content-Security-Policy |
Enable conditional/alternate directive values |
Active |
Normal |
Feature request |
2.x-dev |
|
2 years 11 months |
|
Content-Security-Policy |
Cache CSP header for dynamic requests |
Needs work |
Normal |
Feature request |
8.x-1.x-dev |
|
3 years 10 months |
|
Attach Inline |
Weight and Group is not respected, inline css always injected last |
Needs work |
Normal |
Bug report |
8.x-1.x-dev |
|
3 years 4 months |
|
Periodic |
Automated Drupal 11 compatibility fixes for periodic |
Needs review |
Normal |
Task |
1.x-dev |
|
2 years 6 months |