AJAX HTTP Error During Security Review Analysis and Multiple Errors on Settings Page

Created on 15 January 2025, 6 months ago
Updated 18 January 2025, 6 months ago

Problem/Motivation

When running the Security Review analysis, an AJAX HTTP error occurs with a 500 HTTP Result Code. Additionally, several security checks are not completed, and attempting to view details for these checks results in a TypeError. Furthermore, navigating to the settings page displays two warning messages. 

Steps to reproduce

1. Install a clean version of Drupal 11.1.1.
2. Enable the Security Review module.
3. Navigate to the Security Review settings page.
4. Initiate the Security Review analysis.
5. Observe the AJAX HTTP error message.

An AJAX HTTP error occurred.
HTTP Result Code: 500
Debugging information follows.
Path: /en/batch?id=124&op=do_nojs&op=do
StatusText: error
ResponseText: The website encountered an unexpected error. Try again later.Drupal\Core\Database\DatabaseExceptionWrapper: SQLSTATE[42000]: Syntax error or access violation: 1103 Incorrect table name '': SELECT COUNT(*) AS "expression"
FROM
(SELECT 1 AS "expression"
FROM
"" "t") "subquery"; Array
(
)
in Drupal\security_review\Plugin\SecurityCheck\Fields->processField() (line 251 of modules/contrib/security_review/src/Plugin/SecurityCheck/Fields.php). Drupal\Core\Database\StatementWrapperIterator->execute() (Line: 658)
Drupal\Core\Database\Connection->query() (Line: 520)
Drupal\Core\Database\Query\Select->execute() (Line: 251)
Drupal\security_review\Plugin\SecurityCheck\Fields->processField() (Line: 184)
Drupal\security_review\Plugin\SecurityCheck\Fields->processEntityType() (Line: 129)
Drupal\security_review\Plugin\SecurityCheck\Fields->run() (Line: 151)
_security_review_batch_run_op() (Line: 297)
_batch_process() (Line: 139)
_batch_do() (Line: 95)
_batch_page() (Line: 52)
Drupal\system\Controller\BatchController->batchPage()
call_user_func_array() (Line: 123)
Drupal\Core\EventSubscriber\EarlyRenderingControllerWrapperSubscriber->Drupal\Core\EventSubscriber\{closure}() (Line: 593)
Drupal\Core\Render\Renderer->executeInRenderContext() (Line: 121)
Drupal\Core\EventSubscriber\EarlyRenderingControllerWrapperSubscriber->wrapControllerExecutionInRenderContext() (Line: 97)
Drupal\Core\EventSubscriber\EarlyRenderingControllerWrapperSubscriber->Drupal\Core\EventSubscriber\{closure}() (Line: 183)
Symfony\Component\HttpKernel\HttpKernel->handleRaw() (Line: 76)
Symfony\Component\HttpKernel\HttpKernel->handle() (Line: 53)
Drupal\Core\StackMiddleware\Session->handle() (Line: 48)
Drupal\Core\StackMiddleware\KernelPreHandle->handle() (Line: 28)
Drupal\Core\StackMiddleware\ContentLength->handle() (Line: 116)
Drupal\page_cache\StackMiddleware\PageCache->pass() (Line: 90)
Drupal\page_cache\StackMiddleware\PageCache->handle() (Line: 48)
Drupal\Core\StackMiddleware\ReverseProxyMiddleware->handle() (Line: 51)
Drupal\Core\StackMiddleware\NegotiationMiddleware->handle() (Line: 36)
Drupal\Core\StackMiddleware\AjaxPageState->handle() (Line: 51)
Drupal\Core\StackMiddleware\StackedHttpKernel->handle() (Line: 709)
Drupal\Core\DrupalKernel->handle() (Line: 19)

6. Navigate to the Security Review page to view the list of checks.
7. Observe that some checks are not colored and have not been run.
8. Click on the "Details" button for any of the non-colored checks.

The website encountered an unexpected error. Try again later.

TypeError: Drupal\security_review\Plugin\SecurityCheck\UploadExtensions::getDetails(): Argument #2 ($hushed) must be of type array, null given, called in /var/www/html/modules/contrib/security_review/src/Controller/HelpController.php on line 207 in Drupal\security_review\Plugin\SecurityCheck\UploadExtensions->getDetails() (line 186 of modules/contrib/security_review/src/Plugin/SecurityCheck/UploadExtensions.php).

Drupal\security_review\Controller\HelpController->checkHelp() (Line: 94)
Drupal\security_review\Controller\HelpController->index()
call_user_func_array() (Line: 123)
Drupal\Core\EventSubscriber\EarlyRenderingControllerWrapperSubscriber->Drupal\Core\EventSubscriber\{closure}() (Line: 593)
Drupal\Core\Render\Renderer->executeInRenderContext() (Line: 121)
Drupal\Core\EventSubscriber\EarlyRenderingControllerWrapperSubscriber->wrapControllerExecutionInRenderContext() (Line: 97)
Drupal\Core\EventSubscriber\EarlyRenderingControllerWrapperSubscriber->Drupal\Core\EventSubscriber\{closure}() (Line: 183)
Symfony\Component\HttpKernel\HttpKernel->handleRaw() (Line: 76)
Symfony\Component\HttpKernel\HttpKernel->handle() (Line: 53)
Drupal\Core\StackMiddleware\Session->handle() (Line: 48)
Drupal\Core\StackMiddleware\KernelPreHandle->handle() (Line: 28)
Drupal\Core\StackMiddleware\ContentLength->handle() (Line: 116)
Drupal\page_cache\StackMiddleware\PageCache->pass() (Line: 90)
Drupal\page_cache\StackMiddleware\PageCache->handle() (Line: 48)
Drupal\Core\StackMiddleware\ReverseProxyMiddleware->handle() (Line: 51)
Drupal\Core\StackMiddleware\NegotiationMiddleware->handle() (Line: 36)
Drupal\Core\StackMiddleware\AjaxPageState->handle() (Line: 51)
Drupal\Core\StackMiddleware\StackedHttpKernel->handle() (Line: 709)
Drupal\Core\DrupalKernel->handle() (Line: 19)

9. Observe the TypeError message.
10. Navigate to the settings page and observe the warning messages. 

Warning: Undefined array key "findings" in Drupal\security_review\Controller\HelpController->checkHelp() (line 207 of modules/contrib/security_review/src/Controller/HelpController.php).

Warning: Undefined array key "hushed" in Drupal\security_review\Controller\HelpController->checkHelp() (line 207 of modules/contrib/security_review/src/Controller/HelpController.php).

Proposed resolution

Remaining tasks

User interface changes

No user interface changes are required. 

API changes

No API changes are required. 

Data model changes

No data model changes are required.

🐛 Bug report
Status

Active

Version

3.1

Component

Code

Created by

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024