
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
pipbox.portlet.popform
Advanced tools
Popup Forms for Plone
is a Plone add-on that enables timed popups of
PloneFormGen
_ forms.
Popup forms are configured as a portlet. When you add it, you specify a PloneFormGen form and the time delay (in 1/10th seconds). The form will then be shown as an AJAX popup form.
When the popup is viewed, a cookie is set with a 1-year expiration, and the popup will not display again unless the cookie is absent. That prevents it from annoying more than once. Cookie support is also checked first, so the form will not be displayed if cookies aren't enabled. Again, the idea is to avoid annoying users.
popform is a very small product that's mainly used to control a bit
of pipbox
_ functionality. If there are visual display or AJAX problems,
please file a bug report against pipbox.
.. _PloneFormGen
: http://plone.org/products/ploneformgen
.. _pipbox
: http://plone.org/products/pipbox
Popup Forms for Plone has been tested with Plone 3. Support for Plone 4 is pending a PloneFormGen release that works in Plone 4.
It requires Products.pipbox 3.0a8 or greater (which should get installed automatically as an egg dependency).
Popup Forms for Plone was developed by Steve McMahon
_ for Groundwire
_.
.. _Steve McMahon
: http://reidmcmahon.com
.. _Groundwire
: http://groundwire.org
Don't try to render the popup if no form is configured, or if the configured form can't be found.
Use Plone's createCookie function instead of our own copy. [davisagli]
Add redir_url as a class attributes on portlet assignments so that legacy assignments don't break. [davisagli]
Make all cookies set and checked by browser to avoid cache problems. [SteveM]
Add redirect option. [SteveM]
Show the form prologue and epilogue (requires PloneFormGen >= 1.5.3). [davisagli]
FAQs
Timed PloneFormGen form popup configured via portlet
We found that pipbox.portlet.popform demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.