
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@chcaa/strapi-provider-upload-local-configurable
Advanced tools
Configurable strapi local upload provider with configurable root-dir and partitioning
A configurable local file system upload provider for strapi with the possibilities to configure:
npm install @chcaa/strapi-provider-upload-local-configurable --save
the following settings can be set in ./config/plugins.js
. The provider
, rootDir
and baseUrl
are required. The
rest of the values shown below is the default values.
module.exports = ({ env }) => ({
// ...
upload: {
config: {
provider: '@chcaa/strapi-provider-upload-local-configurable',
providerOptions: {
rootDir: undefined, // an absolute path or path relative to strapis ./public/ dir
urlPath: undefined, // the url-path where files are located e.g. /static/files
sizeLimit: 100000,
partition: { // set depth to a number higher than zero e.g. 2 to create 2 levels of sub-dirs
depth: 0, // a value > 0 will enable partitioning
nameLength: 3, // the name length of each sub-dir
},
fileNamePrefixToSubDir: [ // use the file-name prefix as a sub-dir
"thumbnail_",
"small_",
"medium_",
"large_"
]
},
},
},
// ...
});
The sizeLimit
unit is in bytes. When setting this value high, you should make sure to also configure the body parser middleware maxFileSize so the file can be sent and processed. Read more here
When setting rootDir
and urlPath
to something other than the standard "uploads" dir as defined by strapi,
a change of the router pointing to the new rootDir
and/or urlPath
is required. This can be done with the
@chcaa/strapi-static-file-route plugin
FAQs
Configurable strapi local upload provider with configurable root-dir and partitioning
The npm package @chcaa/strapi-provider-upload-local-configurable receives a total of 0 weekly downloads. As such, @chcaa/strapi-provider-upload-local-configurable popularity was classified as not popular.
We found that @chcaa/strapi-provider-upload-local-configurable demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.