Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Convertit is a format conversion webservice.
Retrieve your document in an other format ! The input file is converted and served back !
Using a dead simple GET
request, documents are pulled. Using POST
request, it takes the attachment.
.. image:: https://api.travis-ci.org/makinacorpus/convertit.png :target: https://travis-ci.org/makinacorpus/convertit
Supported conversions:
Previously converted documents are cleaned along the way (on each request).
Example, convert from odt to pdf :
::
curl http://convertit/?url=http://server/document.odt&to=application/pdf
HTTP/1.1 302 Found
Content-Disposition: attachement; filename=document.pdf
...
GET parameters:
url: absolute url of the document to be converted.
"url" also supports a "{X_FORWARDED_FOR}" placeholder for requests not knowing their own host. "{X_FORWARDED_FOR}" will be replaced with the corresponding "X_FORWARDED_FOR" header if available. Be warned that "X_FORWARDED_FOR" is not a safe value since it can be modified by user agents or given false value by forward proxies. Use only if really needed. Exemple::
curl "http://convertit/?url=http://{X_FORWARDED_FOR}/document.odt&to=application/pdf"
Upload data in POST parameter named file
:
::
curl -F "file=@tiger.svg" http://convertit/?to=image/png
HTTP/1.1 302 Found
Content-Disposition: attachement; filename=tiger.png
application/pdf
if not provided);unoconv
inkscape
Conversion binaries should be in system PATH
(which
is used internally.)
Download and extract a released tarball from pypi <http://pypi.python.org/pypi/convertit>
_
The bleeding edge version is hosted on github <https://github.com/makinacorpus/convertit>
_ ::
git clone https://github.com/makinacorpus/convertit.git cd convertit
::
make serve
Once the application is running, you may visit http://localhost:6543/ in your browser.
Run tests: ::
make tests
Using gunicorn for example :
::
gunicorn --workers=1 --paste=production.ini
Using Docker :
::
sudo docker build -t="convertit" .
sudo docker run -p :6543 convertit
Open an issue <https://github.com/makinacorpus/convertit/issues>
_ to report a
bug or request a new feature.
|makinacom|_
Planet Makina Corpus <http://www.makina-corpus.org>
_Contact us <mailto:python@makina-corpus.org>
_.. |makinacom| image:: http://depot.makina-corpus.org/public/logo.gif .. _makinacom: http://www.makina-corpus.com
Use original request header Accept-language
to download the URL
Add {X_FORWARDED_FOR} placeholder in GET url parameter. Replaced by the corresponding header if available. It avoids the client initiating the request to be aware of its own address. Exemple::
curl "http://convertit/?url=http://{X_FORWARDED_FOR}/document.odt&to=application/pdf"
FAQs
A file conversion Web API in Pyramid
We found that convertit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.