
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Command-line client for Davos - Salesforce Commerce Cloud (Demandware) cartridge uploader for WebDAV
Davos is a WebDav client which is well suited to upload and sync your Cloud Commerce Digital projects. It fully mimics the usage of Eclipse Demandware server configurations featuring profiles and synchronization on file change.
npm i -g davos-cli
In order to use davos you must first provide a davos.json
file which essentially contains a JSON array with profiles.
You can use davos-cli
to interactively create this file and manage profiles.
To create the configuration file you can run 'davos-cli create'.
You could easily insert profiles (dev01, dev02, development etc.) by running the 'davos-cli insert'.
Running the 'davos-cli list' command will display a list of your profiles and will show which profile is active now.
To switch your active profile you can run 'davos-cli switch [name of profile]'.
Now that you have a configuration you could upload your cartridges or watch for changes:
Davos can upload and import your entire sites meta or separate metadata files of your choice.
davos-cli upload:sites
to upload and import your entire sites directory.davos-cli upload:meta --pattern *.xml
to upload and import only the files mattching your pattern from your sites/meta
directory.Davos can create bundles from multiple xml files or split bundles into separate files. At this point you can merge any type of xml files sharing the same root element but can only split meta and library files. This functionality will be expanded in the future.
davos-cli merge [pattern] --out bundle.xml
to merge all files matching pattern
from within the sites
directory into bundle.xml
in your cwd.davos-cli split:meta [path/to/bundle.xml] --out dir/for/chunks
to split all custom and system type extensions and definitions into separate xml files.davos-cli split:lib [path/to/bundle.xml] --out dir/for/chunks
to split all content
elements of a library bundle.table 1. Profile
key | type | description |
---|---|---|
active | Boolean | The active profile will be used by davos. There should only be one active profile at a time. |
profile | String | The name of the profile. |
config | Object | The profile configuration object, see table 2. |
table 2. Profile configuration
key | type | description |
---|---|---|
hostname | String | The sandbox' hostname |
username | String | Your username |
password | String | Your password |
codeVersion | String | The code version to which to deploy your cartridges |
cartridge | Array | |
exclude | Array | |
templateReplace | Object | |
tmpDir | String | A directory where temporary files and archives will be stored. This is optional and defaults to "tmp" |
projectID | String | The project name/ID |
metaDir | String | The base directory for the sites files. This is optional, defaults to "sites". |
[
{
"active": true,
"profile": "dev01",
"config": {
"hostname": "dev01-web-proj.demandware.net",
"username": "user1",
"password": "password1",
"cartridge": [
"foo\\cartridges\\app_foo",
"foo\\cartridges\\int_foo"
],
"codeVersion": "version1",
"exclude": ["**/node_modules/**",
"**/.sass-cache/**"]
}
},
{
"active": false,
"profile": "dev02",
"config": {
"hostname": "dev02-web-proj.demandware.net",
"username": "user2",
"password": "password2",
"cartridge": [
"foo\\cartridges\\app_foo",
"foo\\cartridges\\int_foo"
],
"codeVersion": "version1",
"exclude": ["**/node_modules/**",
"**/.sass-cache/**"]
}
}
]
FAQs
Command-line client for Davos - Salesforce Commerce Cloud (Demandware) cartridge uploader for WebDAV
The npm package davos-cli receives a total of 1 weekly downloads. As such, davos-cli popularity was classified as not popular.
We found that davos-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.