Displays accepted checkout terms and conditions on the admin order view page, preserving each agreement's name and content as it was at the time of order placement.
Mitigates the PolyShell unrestricted file upload vulnerability in the Magento REST API by enforcing an image-only extension allowlist on custom option file uploads. Blocks executable file uploads at both the validator and uploader level.
Automatically scans and removes malware files from the Magento media directory every 15 minutes, protecting the store from uploaded malicious files.
Validates custom option values before processing to prevent unauthorized file type injections via the PolyShell vulnerability. Checks option existence and enforces strict type matching for file-type custom options.
Manages Content Security Policy rules via Magento CLI, storing them in env.php for environment-specific control without database access. Includes automatic CSP header splitting to avoid size limits on servers.
Mitigates PolyShell-style file upload abuse by blocking file custom option uploads and restricting allowed extensions to images only. Includes a CLI command to scan and clear suspicious files from the custom_options media directory.
Looking for contributors - Help fix build issues
Displays Magento Quality Patch status in an admin grid, eliminating the need for CLI access. Notifies users of available updates for relevant patch packages.
Looking for contributors - Help fix build issues
Provides a dashboard to view Composer packages, their status, and security advisories. Sends email reminders about package upgrades and security issues.
Adds Subresource Integrity (SRI) hash enforcement to Content Security Policy headers, ensuring that external scripts and stylesheets have not been tampered with before execution.
Enables configurable CORS Headers on GraphQL and REST APIs
Integrates Utanvet Ellenor risk assessment into Magento 2 checkout, filtering available payment methods based on risk scores and sending order outcome signals on status transitions.