The Web accessibility module was created to assist content editors to check web pages for accessibility and broken links.

Project link

https://www.drupal.org/project/web_accessibility

Git instructions

git clone --branch 8.x-1.x https://git.drupalcode.org/project/web_accessibility.git

PAReview checklist

https://pareview.sh/pareview/https-git.drupal.org-project-web_accessibil...

Comments

cmd87 created an issue. See original summary.

apaderno’s picture

Issue summary: View changes

Thank you for applying! I added the Git instructions for non-maintainer users. Reviewers will check the project and post comments to list what should be changed.

vuil’s picture

Status: Needs review » Needs work

Really nice and useful Drupal 8 module. Congratulation!
Thanks for the contribution!

I will mention some of the issue which need to be fixed:

(1.)
Please replace the deprecated usage of drupal_set_message() with \Drupal::messenger() and Dependency Injection (DI) in Classes when need.

(2.)
Please correct the wrong usage of foreach ($service as $service) {...} in web_accessibility.module.

(3.)
Please fill free to replace dirname(__FILE__) with a simpler __DIR__ in .module web_accessibility_help() (hook_help) function. (Note: I will do the same suggestion to the official Drupal 8 documentation about.)

(4.)
It is always better to use single quotes for 'SELECT * FROM {web_accessibility_services} WHERE id = :id'
instead of "SELECT * FROM {web_accessibility_services} WHERE id = :id".

cmd87’s picture

Thanks for review @vuil!

I did requested changes, here is related commit - https://git.drupalcode.org/project/web_accessibility/commit/c3a98bf

cmd87’s picture

Status: Needs work » Needs review
batkor’s picture

Status: Needs review » Needs work

Hi.
Nitpick:

 $alias = \Drupal::service('path.alias_manager')->getAliasByPath('/node/' . $node->id());
  $nodeUrl = Url::fromUserInput($alias, ['absolute' => TRUE])->toString();

Use

$nodeUrl = $node->toUrl('canonical', ['absolute' => TRUE])->toString();

Move `URL_TOKEN` constant to service interface and use in `hook_form_alter`

...
foreach ($services as $service) {
      $serviceUrl = str_replace(WebServiceInterface::URL_TOKEN, $nodeUrl, $service->url);
...

Use Utility for check valid url

 elseif (!UrlHelper::isValid($url, TRUE)) {

in https://git.drupalcode.org/project/web_accessibility/blob/8.x-1.x/src/Fo...

cmd87’s picture

Thanks for review @batkor!

I implemented requested changes. Here is related commit - https://git.drupalcode.org/project/web_accessibility/commit/d08c316

cmd87’s picture

Status: Needs work » Needs review
rosemaryreilman’s picture

I checked the following:

Manual Review

No duplication
[No: Causes] - Did not find any duplication
README.txt/README.md
[Yes: Follows]
Code long/complex enough for review
[Yes: Follows] - definitely nice to have the links right in the node form
3rd party assets/code
Everything I saw: [Yes: Follows]
vuil’s picture

Status: Needs review » Reviewed & tested by the community

Thank you for the contribution!

I checked all the problems mentioned above and saw that they had already been resolved.
I didn't find another security issue through manual review.

I set the issue status to Reviewed & tested by the community.

apaderno’s picture

Assigned: Unassigned » apaderno
Status: Reviewed & tested by the community » Fixed

Thank you for your contribution! I am going to update your account.

These are some recommended readings to help with excellent maintainership:

You can find more contributors chatting on the IRC #drupal-contribute channel. So, come hang out and stay involved.
Thank you, also, for your patience with the review process.
Anyone is welcome to participate in the review process. Please consider reviewing other projects that are pending review. I encourage you to learn more about that process and join the group of reviewers.

I thank all the dedicated reviewers as well.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

cmd87’s picture

Thanks @kiamlaluno!

One thing - I still see that module is not covered by Drupal's security advisory policy - https://www.drupal.org/project/web_accessibility

Is there something else that needs to be done to hide this message?

apaderno’s picture

You need to edit the project from https://www.drupal.org/node/2946542/edit, to opt into security coverage.