
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
cmsplugin-embedded-menu
Advanced tools
This simple extension allows you to place menus in placeholders via the administration interface.
make sure you are using a python virtual environment
virtualenv ~/Dev/virtualenv/projectname; . ~/Dev/virtualenv/projectname/bin/activate; cd ~/Dev/projects/projectname/;
install it from pypi
pip install cmsplugin-embedded-menu
or, install it from github
pip install git+https://github.com/airtonix/cmsplugin-embedded-menu
add cmsplugin_embeddedmenu
to your INSTALLED_APPS
perform a ./manage.py migrate
(for south users), or ./manage.py syncdb
There is no step three!
Choosing a template in the administration interface means that you populate the following two relative paths (to any of your app template dirs) with templates you desire to be made available.
Any .html file that doesn't contain the word 'base' will be presented in the template selector combo dropdown in the admin interface.
For example, if your django project was at :
`~/Dev/Django/MyProjectName/`
And you had a django application named SomethingSomethingSomething
at :
`~/Dev/Django/MyProjectName/SomethingSomethingSomething/`
Then templates for this plugin could be found at :
`~/Dev/Django/MyProjectName/SomethingSomethingSomething/templates/cmsplugin_embeddedmenu/layouts/*.html`
In fact, anywhere django looks for templates, you can place the following tree :
/cmsplugin_embeddedmenu
/layouts
/*.html
Templates in all groups are provided the context :
a CMSPlugin has many useful attributes for you to use, the main one
is plugin.instance
a reference to the settings model.
plugin' : An instance of CMSPlugin, which itself provides reference to either of the settings models as outlined below.
base.html in the cmsplugin_configurableproduct
directory is used to load the
selected template chosen in the administration interface.
templates here are provided the context :
plugin.instance template Chosen template.
anyone is free to contribute, simply submit a merge request at github : http://github.com/airtonix/cmsplugin-configurableproduct
provide option to manipulate menu choices:
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.