
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
djangocms-local-navigation
Advanced tools
This package provides a DjangoCMS plugin that displays a menu based on the structure of the current page. You can for example create a local menu that is based on all the h2 elements on your page.
$ pip install djangocms-local-navigation
Then add it to INSTALLED_APPS:
INSTALLED_APPS = (
# ...
'djangocms_local_navigation',
)
Also add the plugin processor, which will add the id
attributes to your
navigation elements, allowing you to actually linking to them:
CMS_PLUGIN_PROCESSORS = (
# ...
'djangocms_local_navigation.cms_plugin_processors.patch_elements',
)
You should now be able to add the plugin "Local menu" to your pages.
Default: h2
Defines which elements are used to create the local menu. This is a CSS
selector so if you want for example only elements with the class
local-navigation-heading
to be included in the navigation you could use
h2.local-navigation-heading
.
Default: None
(means automatic detection)
Defines which XML parser is used to add anchors to the elements and create the menu. Refer to the BeautifulSoup documentation for more information. Be advised that lxml has known issues with mod_python and can cause your processes to hang.
To run the tests, use ./setup.py test
.
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.