Strict Compliant in Security & Compliance

Mitigates the PolyShell unrestricted file upload vulnerability in the Magento REST API by enforcing an image-only extension allowlist on custom option file uploads. Blocks executable file uploads at both the validator and uploader level.

62 113,308 11 1.0.0 185d

Replaces Magento's Xml\Security class with a hardened version that correctly detects XML entities even when the input is not UTF-8 encoded under php-fpm, closing a potential XXE gap.

0 34 0 1.0.1 618d

This module implements the .well-known/change-password standard for Magento 2. This allows password managers to easily locate and redirect users to the correct URL when they wish to change their password.

6 13,671 0 0.0.6 710d

Disables Content Security Policy (CSP) enforcement during checkout. Bypasses CSP restrictions introduced in the 2024-06-11 security update without fully disabling the CSP module.

8 37,863 0 1.0.0 827d