
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@samhammer/ckeditor5-simple-image-upload-plugin
Advanced tools
[](https://www.npmjs.com/package/@samhammer/ckeditor5-simple-image-upload-plugin)
A generic ckeditor plugin to upload images with a custom api backend.
To be able to use this plugin you need a custom build of ckeditor.
Further instructions can be found here: https://ckeditor.com/docs/ckeditor5/latest/builds/guides/integration/installing-plugins.html
Installation:
npm i @samhammer/ckeditor5-simple-image-upload-plugin
This plugin uses a hook which can be configured like shown below. This hook is called with the JS-File-Object as parameter and has to return a Promise which resolves to the full URL of the uploaded image.
Example:
InlineEditor
.create( editorElement, {
simpleImageUpload: {
onUpload: file => {
// do any upload stuff here with the JS-File-Object
return Promise.resolve("http://path/to/the/uploaded/image.jpg");
},
onAbort: () => { // OPTIONAL
// abort the upload here. The promise from onImageUpload should be rejected after that.
}
}
} )
.then( ... )
.catch( ... );
For publishing an npm account that is referenced to the organization is required.
See the following how to:
https://docs.npmjs.com/getting-started/publishing-npm-packages
If everything is configured correctly just count up the version number in our package.json and execute one of the following commands:
npm publish --access public
ckeditor5-simple-image-upload-plugin is released under the MIT License. See LICENSE file for details.
FAQs
[](https://www.npmjs.com/package/@samhammer/ckeditor5-simple-image-upload-plugin)
The npm package @samhammer/ckeditor5-simple-image-upload-plugin receives a total of 29 weekly downloads. As such, @samhammer/ckeditor5-simple-image-upload-plugin popularity was classified as not popular.
We found that @samhammer/ckeditor5-simple-image-upload-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.