unserialize() is insecure unless allowed classes are limited. Use a safe format like JSON or use the allowed_classes option.

Created on 9 December 2022, over 1 year ago
Updated 7 April 2024, 3 months ago

Problem/Motivation

FILE: /var/www/html/drupal_9.4/drupal/web/modules/contrib/password_policy/src/Plugin/migrate/process/PolicyConfiguration.php
--------------------------------------------------------------------------------------------------------------------------------------------
FOUND 2 ERRORS AFFECTING 2 LINES
--------------------------------------------------------------------------------------------------------------------------------------------
 127 | ERROR | Type hint "array" missing for $value
 190 | ERROR | unserialize() is insecure unless allowed classes are limited. Use a safe format like JSON or use the allowed_classes option.
--------------------------------------------------------------------------------------------------------------------------------------------


FILE: /var/www/html/drupal_9.4/drupal/web/modules/contrib/password_policy/password_policy_history/tests/src/Unit/PasswordHistoryTest.php
----------------------------------------------------------------------------------------------------------------------------------------
FOUND 2 ERRORS AFFECTING 2 LINES
----------------------------------------------------------------------------------------------------------------------------------------
 131 | ERROR | Missing function doc comment
 134 | ERROR | TRUE, FALSE and NULL must be uppercase; expected "TRUE" but found "true"
----------------------------------------------------------------------------------------------------------------------------------------

Time: 780ms; Memory: 12MB
📌 Task
Status

Postponed: needs info

Version

3.0

Component

Code

Created by

🇮🇳India Rohit Rana

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • Status changed to Postponed: needs info 3 months ago
  • 🇺🇸United States Kristen Pol Santa Cruz, CA, USA

    Thanks to everyone for the work on this issue.

    I'm going through all the 8.x issues.

    As the 8.x is no longer supported, I'm postponing this issue for now and need feedback as to whether or not this issue is relevant to 4.0.x.

    If it is, please reopen and change the version, make sure the issue summary is clear and complete, including steps to reproduce, and reroll the patch. If it's not, please close.

    If there is no response to this in a month addressing the above, it can be closed.

Production build 0.69.0 2024