Skip to content

Latest commit

 

History

History
43 lines (22 loc) · 890 Bytes

File metadata and controls

43 lines (22 loc) · 890 Bytes

Change Log for drupal-spider/drupalsecurity

All notable changes to this project will be documented in this file.

This projects adheres to Keep a CHANGELOG and uses Semantic Versioning.

[1.2.3]

Add

  • Added ZipExtractSniff to warn about risky uses of ZipArchive::extractTo(), ZipArchive::open(), and Drupal\\Core\\Archiver\\Zip::extract().

[1.2.2]

Add

  • A new sniff for auditing PHP unserialize() vulnerability.

  • A new sniff for auditing FieldType plugin.

[1.2.1]

Add

A new sniff for auditing cache poisoning vulnerability.

[1.2.0]

Change

Now, you can install this tool via a single composer command.

[1.1.1]

Update

Fix the dependency name in composer.json file.

[1.1.0]

Add

A new sniff for checking the access to a Drupal view.