Contrib.social

Add test coverage for "Code injection via preg_replace()"

Open on Drupal.org →
Created on 1 July 2015, almost 9 years ago
Updated 30 January 2024, 5 months ago

Follow-up to #2508735: Code injection via preg_replace() →

Problem/Motivation

#2508735: Code injection via preg_replace() → did go in without test coverage.

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes

📌 Task
Status

Closed: outdated

Version

11.0 🔥

Component
System  →

Last updated 1 day ago

No maintainer
Created by

🇩🇪Germany Fabianx

Live updates comments and jobs are added and updated live.
  • Security improvements

    It makes Drupal less vulnerable to abuse or misuse. Note, this is the preferred tag, though the Security tag has a large body of issues tagged to it. Do NOT publicly disclose security vulnerabilities; contact the security team instead. Anyone (whether security team or not) can apply this tag to security improvements that do not directly present a vulnerability e.g. hardening an API to add filtering to reduce a common mistake in contributed modules.

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • Comment 5 months ago →
    🇳🇿New Zealand quietone New Zealand

    Three files were changed in the originating issue.

    core/modules/system/src/MachineNameController.php
    The change in \Drupal\system\MachineNameController::transliterate is tested in \Drupal\Tests\system\Unit\Transliteration\MachineNameControllerTest

    core/modules/image/src/PathProcessor/PathProcessorImageStyles.php
    the change is in \Drupal\image\PathProcessor\PathProcessorImageStyles::processInbound and the code is tested in \Drupal\Tests\image\Functional\ImageDimensionsTest

    core/lib/Drupal/Core/Block/BlockBase.php
    That code is now in \Drupal\Core\Block\BlockPluginTrait::getMachineNameSuggestion and it is tested in \Drupal\Tests\block\Kernel\BlockInterfaceTest

    Therefor, closing as outdated.

contrib.social Blog FAQ Discussions
Production build 0.69.0 2024