Git Product home page Git Product logo

vonage-php-sdk-drupal-9's Introduction

Drupal 9 and Vonage PHP SDK Demo

Contributor Covenant GPL v2 licensed

Nexmo is now known as Vonage

This is a skeleton application for demoing the Vonage Drupal module and Drupal 9. To use this, you'll need a Vonage account. Sign up for free at nexmo.com.

This bundle is currently in development/beta status, so there may be bugs

Installation

Requirements

  • PHP 7.3 or higher
  • SQLite 3.26 or higher OR MySQL 5.7.8 or higher

To use this demo code, you need to:

  1. $ git clone https://github.com/nexmo-community/vonage-php-sdk-drupal-9.git vonage-and-drupal
  2. $ cd vonage-and-drupal
  3. $ composer install
  4. $ php -S localhost:3000 -t web

In your browser you can now visit http://localhost:3000 and begin the Drupal installation process.

Usage

This application serves as a way to see how to use the Vonage PHP SDK, Vonage Drupal Module, and Drupal 9 together to take advantage of the Vonage APIs. Once you have installed Drupal, you can go to the "Extend" page and enable both the "Vonage API SDK" and "Vonage Hello World" modules.

Configuration for Vonage can be found at http://localhost:3000/admin/config/vonage.

Sample code for using Vonage in a custom module is located in web/modules/vonage_hello_world/.

Contributing

This project is actively developed, and we love to hear from you! Please feel free to create an issue or open a pull request with your questions, comments, suggestions and feedback.

vonage-php-sdk-drupal-9's People

Contributors

dragonmantank avatar

Stargazers

avatar

Watchers

avatar avatar avatar

vonage-php-sdk-drupal-9's Issues

core9.4.1: 1 vulnerabilities (highest severity is: 6.1) - autoclosed

Vulnerable Library - core9.4.1

Subtree split of drupal's /core directory

Library home page: https://github.com/drupal/core.git

Vulnerable Source Files (1)

/web/core/assets/vendor/jquery.ui/ui/widgets/checkboxradio.js

Vulnerabilities

CVE Severity CVSS Dependency Type Fixed in Remediation Available
CVE-2022-31160 Medium 6.1 core9.4.1 Direct jquery-ui - 1.13.2 ❌

Details

CVE-2022-31160

Vulnerable Library - core9.4.1

Subtree split of drupal's /core directory

Library home page: https://github.com/drupal/core.git

Found in base branch: main

Vulnerable Source Files (1)

/web/core/assets/vendor/jquery.ui/ui/widgets/checkboxradio.js

Vulnerability Details

jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling .checkboxradio( "refresh" ) on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the label in a span.

Publish Date: 2022-07-20

URL: CVE-2022-31160

CVSS 3 Score Details (6.1)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Network
    • Attack Complexity: Low
    • Privileges Required: None
    • User Interaction: Required
    • Scope: Changed
  • Impact Metrics:
    • Confidentiality Impact: Low
    • Integrity Impact: Low
    • Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31160

Release Date: 2022-07-20

Fix Resolution: jquery-ui - 1.13.2

core9.4.5: 1 vulnerabilities (highest severity is: 6.1) - autoclosed

Vulnerable Library - core9.4.5

Subtree split of drupal's /core directory

Library home page: https://github.com/drupal/core.git

Found in HEAD commit: c92b5874b1578a037adfe7dfc9bc7d43084b0199

Vulnerable Source Files (1)

/web/core/assets/vendor/jquery.ui/ui/widgets/checkboxradio.js

Vulnerabilities

CVE Severity CVSS Dependency Type Fixed in Remediation Available
CVE-2022-31160 Medium 6.1 core9.4.5 Direct jquery-ui - 1.13.2 ❌

Details

CVE-2022-31160

Vulnerable Library - core9.4.5

Subtree split of drupal's /core directory

Library home page: https://github.com/drupal/core.git

Found in HEAD commit: c92b5874b1578a037adfe7dfc9bc7d43084b0199

Found in base branch: main

Vulnerable Source Files (1)

/web/core/assets/vendor/jquery.ui/ui/widgets/checkboxradio.js

Vulnerability Details

jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling .checkboxradio( "refresh" ) on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the label in a span.

Publish Date: 2022-07-20

URL: CVE-2022-31160

CVSS 3 Score Details (6.1)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Network
    • Attack Complexity: Low
    • Privileges Required: None
    • User Interaction: Required
    • Scope: Changed
  • Impact Metrics:
    • Confidentiality Impact: Low
    • Integrity Impact: Low
    • Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31160

Release Date: 2022-07-20

Fix Resolution: jquery-ui - 1.13.2

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.