Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
A simple blog module that lets users create multiple blogs.
The blog module installs like most other BrowserCMS modules (http://guides.browsercms.org/installing_modules.html)
$ gem install bcms_blog
$ rails g cms:install bcms_blog
$ rake db:migrate
$ rake db:seed
For projects with existing databases, you may need to comment out other lines in db/seeds.rb so only the blog seed data runs.
If a Blog is configured for 'Moderate Comments', then when visitors submit them they will be automatically placed in a moderation queue for approval. In the Content Library, under 'Blog Comments', these comments will appear in draft status. They can be Published like any other content. (There is current no automatic notification for new comments).
If the blog is set to no moderation, then comments will appear immediately. This obviously increases the likelyhood of spam, but staff can use the Content Library to delete the offending comments like any other content.
This module includes an RSS feeds route that can handle multiple blogs. To expose the RSS autodiscovery link, you can call the feeds_link_tag_for helper in your template header:
<%= feeds_link_tag_for "MyBlog" %>
Where "MyBlog" is the name of the blog.
If your site has multiple blogs, you need to call the helper once for every link you intend to expose:
<%= feeds_link_tag_for "MyBlog" %>
<%= feeds_link_tag_for "MyOtherBlog" %>
This module adds some additional level of security around blogs and content that are slightly different from a vanilla BrowserCMS installation. Here's the highlights:
The module provides a template that is a good starting point for your blog's layout. If you want to further customize the look and feel, just copy the file app/views/partials/_blog_post.html.erb on this repository to app/views/partials on your application and modify it to suit your needs.
Keep in mind that both the posts list and individual post pages are handled by the same partial.
When each blog is created, there is an additional set of routes that are also created, based on the 'path' of the blog. The initial blog path is based on the name of the blog.
/:blog_path/:year/:month/:day/:slug
/:blog_path/:year/:month/:day
/:blog_path/:year/:month
/:blog_path/:year
/:blog_path/tag/:tag
/:blog_path/category/:category
This module will add the following new items to your project.
Special thanks to some amazing folks from the BrowserCMS community for their work in building the essential features for this module. Here are the MVPs that made this possible:
FAQs
Unknown package
We found that bcms_blog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.