Disables Content Security Policy (CSP) in Magento 2. Simplifies disabling CSP for shops where it's not required.
No Errors in Security & Compliance
These modules have no PHPCS errors (warnings OK), pass PHPStan, and build correctly.
Provides CSP (Content Security Policy) utilities for other modules, including nonce and hash generation. Helps improve website security by managing CSP directives.
CLI tool that inspects and reports the Content-Security-Policy headers generated for a given Magento URL and policy, making CSP values easier to review than digging through the browser.
Hyva theme companion for mageme/module-eu-withdrawal. Re-renders the storefront-facing withdrawal flow with the Hyva design system. Install it when your storefront runs on a Hyva theme.
Prevents Magento orders from being placed based on configurable rules, with pluggable matchers for blocking by IP, email, or geolocation.
CustomGento_Cookiebot
Strict Compliantcustomgento/module-cookiebot-m2 100
A Magento 2 module that integrates Cookiebot into your store.
Mitigates PolyShell-style file upload abuse by blocking file custom option uploads and restricting allowed extensions to images only. Includes a CLI command to scan and clear suspicious files from the custom_options media directory.
Manages Content Security Policy rules via Magento CLI, storing them in env.php for environment-specific control without database access. Includes automatic CSP header splitting to avoid size limits on servers.
Allows administrators to change customer passwords directly from the customer edit page in the admin panel. Includes a command-line interface for password updates.
This extension is adjusting the Cookie SameSite attribute issue since Chrome 80.
Withdrawal Button for Magento 2
run-as-root/module-withdrawal 66
Implements the EU right of withdrawal (Directive (EU) 2023/2673) with a clearly visible withdrawal button, letting customers withdraw from purchase contracts from their account or via a guest search form, with deadline calculation, confirmation emails, and a full admin overview of withdrawals.
Withdrawal Button — Hyva Compatibility
run-as-root/module-withdrawal-hyva 66
Provides Hyva-compatible frontend templates (Tailwind CSS and Alpine.js) for the Withdrawal Button module, replacing its Luma/Knockout/RequireJS templates so the EU right-of-withdrawal workflow renders correctly on Hyva storefronts.