OpenID Connect / OAuth client 3.0.0-alpha9 — New alpha version released for module openid_connect (3.0.0-alpha9). Google Analytics — Module google_analytics crossed 1,000 active installs. Timelinr 1.0.1 — Minor update available for module timelinr (1.0.1). GraphQL Compose Codegen 1.1.2 — Minor update available for module graphql_compose_codegen (1.1.2). Mapy.com 1.1.3 — Minor update available for module mapycom (1.1.3). Ckeditor5 entity browser 3.0.3 — Minor update available for module ckeditor5_entity_browser (3.0.3). Ckeditor5 entity browser 3.0.1 — Minor update available for module ckeditor5_entity_browser (3.0.1). Ckeditor5 entity browser 3.0.2 — Minor update available for module ckeditor5_entity_browser (3.0.2). Teamleader Integration 4.0.2 — Minor update available for module teamleader (4.0.2). Entityqueue Buttons 1.1.2 — Module entityqueue_buttons updated after 8 months of inactivity (1.1.2).

HTTP Parameter Pollution

54 sites No security coverage Drupal 9–11

View on drupal.org

This module helps prevent security vulnerabilities by cleaning up duplicate query parameters in URLs. It automatically removes earlier instances of repeated parameters and redirects the user to the corrected URL.

The HTTP Parameter Pollution module is designed to mitigate HTTP Parameter Pollution issues.
It inspects incoming GET requests for duplicate query parameters and sanitizes the URL by removing earlier duplicates—keeping only the last occurrence of each parameter. When duplicates are found, the module rebuilds the query string and automatically redirects the user to the cleaned URL.

Depends on

Dependencies of the latest stable release

No dependencies recorded for this project.

Required by

Tracked projects that depend on this one

No tracked projects depend on this one yet.

Activity

Tracked releases

Tracked since

Feb 2025

Latest release

4 months ago

Releases (12 mo)

Maintenance

Active

Releases

Version	Type	Core	Notes	Release date
1.0.1	Stable	9–11		Apr 1, 2026
1.0.0	Stable	9–11		Feb 6, 2025