Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
collective.clipboardupload
Advanced tools
Allows uploading images into Plone site by pasting them into TinyMCE WYSIWYG editor
.. image:: https://travis-ci.org/quintagroup/collective.clipboardupload.png :target: https://travis-ci.org/quintagroup/collective.clipboardupload
Quintagroup has developed a collective.clipboardupload tool that essentially allows you to copy images and past them directly into TinyMCE visual editor.
.. image:: http://quintagroup.com/services/plone-development/products/collective.clipboardupload/collective-clipboardupload.png/ :target: http://www.youtube.com/watch?v=V3-z4M8M74g
In your buildout.cfg add the following::
[buildout] ....
eggs =
...
collective.clipboardupload
You don’t need to activate this add-on product after buildout installation. See the instance.log file to check whether Collective.clipboardupload was properly installed.
Collective.clipboardupload is a Python <https://quintagroup.com/services/python>
_ package, developed to simplify the process of inserting images into visual editor without the need to upload the image.
After you have installed the product, you can drag and drop picture from local folder, make print screen or select an area of image, opened in, for example, Paint, and copy it to the clipboard. Switch to Plone TinyMCE editor and Paste using your browser menu Edit -> Paste or key combination. The picture will be uploaded to the same folder, which contains an edited page, and stored as an image content type. Title is automatically generated and can be changed any time. Furthermore, the path to the image itself upon saving in TinyMCE is rendered as resolveUID link.
FAQs
Allows uploading images into Plone site by pasting them into TinyMCE WYSIWYG editor
We found that collective.clipboardupload demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.