CM Drupal Contribution Challenge 2020
CM Drupal Contribution Challenge 2020
CM Drupal Contribution Challenge 2020
CM Drupal Contribution Challenge 2020
In case you're not aware, this year a bunch of us at CM are taking on a Drupal contribution challenge. Do go read about it! I managed to squeeze in this contribution BEFORE the challenge started ? What a way to start the year! We have a site that uses a large number of features to manage a large number of taxonomies, and I was tasked with rabbit-holing them all. That is, to make sure...
Last night saw the popular EU Cookie Compliance module fall from grace, as the Drupal community discovered that numerous inputs in the admin form were not being sanitised. To me, this shows some serious failings in how our community is handling security awareness. Let's do some fixing :) ### 1) We need to make this OBVIOUS, with clear examples One of the most important things when trying to get people to write secure code is...
After reading this from Ars Technica, which describes how a developer offered to 'help' the maintainer of an NPM module - and then slowly introduced malicious code to it - I can't help but wonder if the Drupal community is vulnerable to the exact same issue. Let's discuss! ###Please, don't touch my package NPM modules have been hacked at before, and it's not pretty when it happens. Because of the way we use packages, it's...
So at DrupalCon Austin I had a great time at the contribution sprints. I worked on some issues affecting Drupal.org, it was great fun! The issues we worked on over the week range from simple things through to some pretty difficult issues. Although Drupal core can always use more contributors, I would suggest that Drupal.org is also desperately short of contributors too. One of the issues I worked on related to the [tracker page for...