Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ApostropheCMS is a content management system (CMS) for Node.js. It supports in-context editing, schema-driven content types, flexible widgets and a great deal more. This module contains everything necessary to build a website with ApostropheCMS.
Please see the ApostropheCMS documentation for detailed information about building sites with ApostropheCMS.
The ApostropheCMS documentation will walk you through some simple steps to get your local environment set up with the technology stack that runs ApostropheCMS (Node.js, MongoDB, ImageMagick) along with installing ApostropheCMS itself.
Then create a new project on your computer and work on building your beautiful website.
The ApostropheCMS documentation will walk you through editing page templates, global content, creating custom widgets and navigation, along with configuring reusable "pieces" and global settings. Plus, a whole lot more!
Our documentation also covers advanced topics such as managing permissions, working with ApostropheCMS data, building forms, and hosting an ApostropheCMS site in production.
Moreover, there's tons of great info in the "How To" section of the docs, and it's always growing!
ApostropheCMS is Node.js all the way through, which means it can be extended in all sorts of interesting ways. Here's a list of some of our favorite modules:
We've got some great open-source tools and how-to articles that can help you out deploying, managing and maintaining ApostropheCMS sites.
Report bugs and submit pull requests via github.
Ask how-to questions via StackOverflow. Be sure to tag them genesys-cms
.
Stay up to date with announcements on our forum.
Chat with the community on our Discord server.
ApostropheCMS is released under the MIT License.
2.93.0 (2019-07-25)
First, make sure the APOS_BUNDLE=1
environment variable is set in your production environment, i.e. in your Heroku environment settings.
Next, set up a "release tasks" script:
# Remember, APOS_BUNDLE=1 must be set globally in your Heroku
# environment settings already - not just this script but also
# the regular dyno startup must see it
node app apostrophe:generation
node app genesys-migrations:migrate
And that's all you have to do! No more creating named bundles and committing them to git. That technique still works, but it is much more work for you.
This new method does require that the release tasks script have access to the production database, as MongoDB is used to store the bundle until the Heroku dynos have a chance to unpack it locally.
Due to the temporary storage of the bundle in MongoDB, if your asset bundle is larger than 16MB this technique will not work... and your users will be miserable, waiting for a 16MB asset bundle to download on their phones! So please, just don't push that much code to the browser. If you must though, you can use the old technique.
Again, see the ApostropheCMS Heroku HOWTO for details. There is more to successful Heroku deployment than just static assert bundling, most importantly you need to use S3 for media storage.
In the lean library (genex.utils.post
), use the csrf-fallback value for the csrf token if there is no csrf cookie name, same as the regular jquery library would. This achieves compatibility with the disableAnonSessions: true
option of genesys-express
.
When copying the permissions of a parent page to subpages, you now have the option to append them rather than replacing all existing permissions. Thanks to Siddharth Joshi.
FAQs
The Genesys Content Management System by Esri Indonesia
The npm package genesys receives a total of 5 weekly downloads. As such, genesys popularity was classified as not popular.
We found that genesys demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.