DEV Community

# drupal

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Drupal OAuth Scope Debt, WordPress Block States, and the Security Work That Still Matters
victorstackai profile

Drupal OAuth Scope Debt, WordPress Block States, and the Security Work That Still Matters

#devlog #learning #ai #drupal
Comments
4 min read
Review: Ally WordPress Plugin Unauthenticated SQL Injection (400k+ Sites) and a Repeatable Response Playbook for WordPress Teams
victorstackai profile

Review: Ally WordPress Plugin Unauthenticated SQL Injection (400k+ Sites) and a Repeatable Response Playbook for WordPress Teams

#security #wordpress #drupal #incidentresponse
Comments
4 min read
SA-CONTRIB-2026-018: SAML SSO Reflected XSS — Script Injection on Your Login Page
victorstackai profile

SA-CONTRIB-2026-018: SAML SSO Reflected XSS — Script Injection on Your Login Page

#drupal #wordpress #security #drupalcms
Comments
3 min read
SA-CONTRIB-2026-016: Islandora Arbitrary File Upload + XSS — A Dangerous Chain
victorstackai profile

SA-CONTRIB-2026-016: Islandora Arbitrary File Upload + XSS — A Dangerous Chain

#drupal #wordpress #security #drupalcms
Comments
3 min read
SA-CONTRIB-2026-017: Drupal Canvas SSRF + Info Disclosure — The Hidden Submodule Problem
victorstackai profile

SA-CONTRIB-2026-017: Drupal Canvas SSRF + Info Disclosure — The Hidden Submodule Problem

#drupal #wordpress #security #review
Comments
3 min read
SA-CONTRIB-2026-015: CAPTCHA Access Bypass — Token Reuse That Breaks Your Spam Gate
victorstackai profile

SA-CONTRIB-2026-015: CAPTCHA Access Bypass — Token Reuse That Breaks Your Spam Gate

#drupal #wordpress #security #drupalcms
Comments
3 min read
SA-CONTRIB-2026-019: Responsive Favicons Persistent XSS — Admin Config as Attack Surface
victorstackai profile

SA-CONTRIB-2026-019: Responsive Favicons Persistent XSS — Admin Config as Attack Surface

#drupal #wordpress #security #drupalcms
Comments
3 min read
SA-CONTRIB-2026-012: Theme Negotiation by Rules CSRF — GET Requests That Mutate State
victorstackai profile

SA-CONTRIB-2026-012: Theme Negotiation by Rules CSRF — GET Requests That Mutate State

#drupal #drupalcms #wordpress #review
Comments
4 min read
Review: Real-Time Collaboration in the WordPress Block Editor and What Changes for Plugin and Block Developers
victorstackai profile

Review: Real-Time Collaboration in the WordPress Block Editor and What Changes for Plugin and Block Developers

#wordpress #drupal #gutenberg #blockeditor
Comments
4 min read
Drupal SA-CONTRIB-2026-011 through 019: Full Triage Map and Impact Assessment
victorstackai profile

Drupal SA-CONTRIB-2026-011 through 019: Full Triage Map and Impact Assessment

#drupal #wordpress #security #triage
Comments
4 min read
assertEqualHTML() in WordPress: Kill Your Brittle HTML Tests
victorstackai profile

assertEqualHTML() in WordPress: Kill Your Brittle HTML Tests

#wordpress #drupal #testing #phpunit
Comments
4 min read
WordPress 7.0 Beta 2 Compatibility Risks and Migration Test Checklist
victorstackai profile

WordPress 7.0 Beta 2 Compatibility Risks and Migration Test Checklist

#wordpress #drupal #gutenberg #compatibility
Comments
4 min read
Review: GitHub Security Lab's Open-Source AI Vulnerability-Scanning Framework for Drupal Module and WordPress Plugin CI Pipel...
victorstackai profile

Review: GitHub Security Lab's Open-Source AI Vulnerability-Scanning Framework for Drupal Module and WordPress Plugin CI Pipel...

#security #devops #ai #drupal
Comments
4 min read
Review: GitHub Agentic Workflows Security Architecture Translated into Enforceable CI/CD Guardrails for Drupal and WordPress ...
victorstackai profile

Review: GitHub Agentic Workflows Security Architecture Translated into Enforceable CI/CD Guardrails for Drupal and WordPress ...

#githubactions #security #drupal #wordpress
1
Comments
3 min read
Mastering Upstream Dependency Management in Drupal Multisites
victorstackai profile

Mastering Upstream Dependency Management in Drupal Multisites

#drupal #architecture #composer #multisite
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.