diff --git a/composer.json b/composer.json index 8d8f19d47ee86fe2647652c9812f6bb691b85ab0..0dd108e33247a5bb4d0550553bbd6b56293dbe13 100644 --- a/composer.json +++ b/composer.json @@ -252,6 +252,7 @@ "drupal/password_policy": "3.0-alpha3", "drupal/seckit": "1.0-alpha2", "drupal/security_review": "1.x-dev#35ebae445bb260e961e47c4c58efe7c50c228999", + "drupal/honeypot": "1.24", "drupal/captcha": "1.0-beta1", "drupal/recaptcha": "2.2", "drupal/mailsystem": "4.1", diff --git a/drupal-org.make b/drupal-org.make index 7a5b0c8ed47d880b2f84e07b451f22a2987f4c69..bd146da90d92ab8625c55256dc1c0d50b8f6c07d 100644 --- a/drupal-org.make +++ b/drupal-org.make @@ -240,6 +240,9 @@ projects[security_review][download][url] = https://git.drupal.org/project/securi projects[security_review][download][revision] = 35ebae445bb260e961e47c4c58efe7c50c228999 projects[security_review][download][branch] = 8.x-1.x +projects[honeypot][type] = module +projects[honeypot][version] = 1.24 + projects[captcha][type] = module projects[captcha][version] = 1.0-beta1 diff --git a/modules/varbase_features/varbase_security/config/install/honeypot.settings.yml b/modules/varbase_features/varbase_security/config/install/honeypot.settings.yml new file mode 100644 index 0000000000000000000000000000000000000000..75b35dec5ef58706bac237498da640a76f938ef8 --- /dev/null +++ b/modules/varbase_features/varbase_security/config/install/honeypot.settings.yml @@ -0,0 +1,19 @@ +unprotected_forms: + - user_login_form + - search_form + - search_block_form + - views_exposed_form + - honeypot_settings_form +protect_all_forms: false +log: false +element_name: url +time_limit: 5 +expire: 300 +form_settings: + user_register_form: true + user_pass: true + webforms: true + node_landing_page_form: false + node_page_form: false + node_varbase_heroslider_media_form: false + node_webform_form: true diff --git a/modules/varbase_features/varbase_security/varbase_security.features.yml b/modules/varbase_features/varbase_security/varbase_security.features.yml index 4392d744831957a43b84739d86731b703caf60a7..96077da671a68c8e663d408ebaa909f88f5c5cbf 100644 --- a/modules/varbase_features/varbase_security/varbase_security.features.yml +++ b/modules/varbase_features/varbase_security/varbase_security.features.yml @@ -5,4 +5,22 @@ excluded: - field.storage.user.field_last_password_reset - field.storage.user.field_password_expiration - core.entity_form_display.user.user.default -required: true + - ultimate_cron.job.security_review_cron +required: + - honeypot.settings + - seckit.settings + - security_review.check.security_review-admin_permissions + - security_review.check.security_review-error_reporting + - security_review.check.security_review-executable_php + - security_review.check.security_review-failed_logins + - security_review.check.security_review-field + - security_review.check.security_review-file_perms + - security_review.check.security_review-input_formats + - security_review.check.security_review-private_files + - security_review.check.security_review-query_errors + - security_review.check.security_review-temporary_files + - security_review.check.security_review-trusted_hosts + - security_review.check.security_review-upload_extensions + - security_review.check.security_review-views_access + - security_review.settings + - password_policy.password_policy.default_policy diff --git a/modules/varbase_features/varbase_security/varbase_security.info.yml b/modules/varbase_features/varbase_security/varbase_security.info.yml index 718df750136a28b067035bea317aa161909f7668..4d9c1b57e14f4168065a27b77c660689983f0f49 100644 --- a/modules/varbase_features/varbase_security/varbase_security.info.yml +++ b/modules/varbase_features/varbase_security/varbase_security.info.yml @@ -2,18 +2,18 @@ name: 'Varbase Security' description: 'Manages general security configurations, with password policy, username enumeration prevention, security kit and review.' type: module dependencies: - - captcha - datetime - field + - honeypot - password_policy - password_policy_character_types - password_policy_characters - password_policy_history - password_policy_length - password_policy_username - - recaptcha - seckit - security_review + - ultimate_cron - user - username_enumeration_prevention package: Varbase