5 ms·
To get a module marked as "covered by the Drupal security team" it is required to go through a community code review.
by Gaelan 10y ago
To get a module marked as "covered by the Drupal security team" it is required to go through a community code review.
- jacquesm 10y agoYes, but that's backwards. There are many many modules that don't have that stamp but that are distributed via the site and besides I strongly believe that security is not something you just vet for after the fact but that should go in to the design of your product. If you don't do that it becomes a 'find the last hole in the cheese' exercise and very likely there will be many holes that you don't find that way that would not have been there in the first place had the whole thing been designed from day one with that in mind. On the whole I think 'let amateurs build it and experts vet it' is better than just 'let amateurs build it' but it doesn't come close to 'let experts build it and experts vet it'.
- lightlyused 10y agoWhich is pretty easy to pass, you just have to follow the coding standards.
- Gaelan 10y agoAnd not have any (glaring) security flaws.