Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
nodebb-plugin-s3-uploads-etr
Advanced tools
A plugin for NodeBB to take file uploads and store them on S3, modified for Quest and maintained by ETR
This plugin is an ETR maintained fork of nodebb-plugin-s3-uploads-updated-quest, which, in turn is a fork of the outdated and unmaintained nodebb-plugin-s3-uploads and nodebb-plugin-s3-uploads-updated
npm install nodebb-plugin-s3-uploads-updated-quest
Plugin Version | Dependency | Version Requirement |
---|---|---|
0.6.x | NodeBB | Developed on v1.13.1+ |
A plugin for NodeBB to take file uploads and store them on S3, uses the filter:uploadImage
hook in NodeBB.
Asset host is optional - If you do not specify an asset host, then the default asset host is <bucket>.s3.amazonaws.com
.
Asset path is optional - If you do not specify an asset path, then the default asset path is /
.
From the NodeBB Admin panel, you can configure the following settings to be stored in the Database:
bucket
- required — The S3 bucket to upload intohost
- optional - The base URL for the asset - defaults to: http://<bucket>.s3.amazonaws.compath
- optional - The asset path (optional)accessKeyId
- required — The AWS Access Key IdsecretAccessKey
- required — The AWS Secret Access KeyNOTE: Storing your AWS Credentials in the database is can present a security risk. YOU HAVE BEEN WARNED.
Currently all uploads are stored in S3 keyed by a UUID and file extension, as such, if a user uploads multiple avatars, all versions will still exist in S3. This is a known issue and may require some sort of cron job to scan for old uploads that are no longer referenced in order for those objects to be deleted from S3.
FAQs
A plugin for NodeBB to take file uploads and store them on S3, modified for Quest and maintained by ETR
We found that nodebb-plugin-s3-uploads-etr demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.