Socket
Socket
Sign inDemoInstall

strapi-plugin-protected-populate

Package Overview
Dependencies
Maintainers
1
Versions
10
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

strapi-plugin-protected-populate

Protects your populates from the url against bad actors.


Version published
Weekly downloads
50
increased by11.11%
Maintainers
1
Weekly downloads
 
Created
Source

Strapi Protected Populate Plugin

Strapi Discord NPM Version Monthly download on NPM

Table of Contents

🚦 Current Status

For more information on contributing please see the contrib message below.

✨ Features

These are the primary features that are finished or currently being worked on:

  • Protected your Get request populates and fields
  • Allow you to protect routes per role (In the near future)

🤔 Motivation

The purpose of this plugin is to have a easy way to protect your get endpoints from getting to much information out of them. I made this plugin since I got sick and tired of writing complex policies to do this exact thing.

🖐 Requirements

Supported Strapi Versions:

Strapi VersionSupportedTested On
v3N/A
<=v4.5.2N/A
v4.5.3/4.6.2December 2022
v4.7.0/4.7.1N/A
v4.8.0+April 2023

This plugin will not work on any version older then v4.5.3 since I am using the on syntax for dynamic zones wat was added in that version

⏳ Installation

Install the plugin in your Strapi project or your Strapi plugin.

# Using Yarn (Recommended)
yarn add strapi-plugin-protected-populate

# Using npm
npm install strapi-plugin-protected-populate

🔧 Configuration

WIP

Config

standard config add the following config to your config/plugins.js

module.exports = () => {
  return {
    'protected-populate': {
      enabled: true,
    },
  };
};

enable auto populate will automatically populate all fields and populates if no ctx.query.populate / ctx.query.fields is found.

add the following config to your config/plugins.js

module.exports = () => {
  return {
    'protected-populate': {
      enabled: true,
      config: {
        ['auto-populate']: true,
      },
    },
  };
};

Contributing

Please open issues before making a pull request so that we can talk about what you want to change for the best results.

Migration

V1.0.0 to v1.1.0 choose what way you want to do the migration GUI or File change

GUI way

Go to the gui select all Media types and deselect them Update to v1.1.1 select all deselected Media

File change

Find all the media in fields and change them to populate

License

MIT

FAQs

Package last updated on 15 Nov 2023

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc