SSL Audit
Component ID
2912848
Component name
SSL Audit
Component type
module
Maintenance status
Development status
Component security advisory coverage
not-covered
Component created
Component changed
Component body
In October 2017, chrome will expand the situations where it display's an insecure warning to include any page where form data is being entered, and while in the incognito mode (https://blog.chromium.org/2017/04/next-steps-toward-more-connection.html).
This module seeks to audit a drupal site for it's SSL readiness by scanning all text field data, and the code base for any non-https included assets to identify places that might trigger mixed content warnings .
Usage: Right now this module is in its infancy. You can go to /admin/reports/ssl-audit and you will see a table listing entities with text fields that include references to assets with non-https URLs.
Project Roadmap:
- Provide better information about the fields with the non-ssl URLs in the report.
- Handle field collectios/paragraph items, by linking to parent entity.
- Cache the report results, re-run only when requested.
- Scan codebase for any URLs in templates/css/