Mitigates the PolyShell unrestricted file upload vulnerability in the Magento REST API by enforcing an image-only extension allowlist on custom option file uploads. Blocks executable file uploads at both the validator and uploader level.
No Errors Modules
These modules have no PHPCS errors (warnings OK), pass PHPStan, and build correctly.
Automatically scans and removes malware files from the Magento media directory every 15 minutes, protecting the store from uploaded malicious files.
Integrates Lucide Icons into Hyva themes. Allows usage of SVG icons in CMS content, pages, blocks and widgets.
Integrates InPost Pay mobile payment app with Magento 2, enabling customers and guests to complete purchases using the InPost Pay checkout flow.
Sends Magento 2 Monolog records to a Buggregator debugging server endpoint, enabling centralized log viewing and analysis outside of the Magento file system.
Adds a debug toolbar to Magento 2, displaying request/response data, SQL queries, profiler information, layout details, and cached items. Helps developers debug by providing insights into application execution.
Mitigates PolyShell-style file upload abuse by blocking file custom option uploads and restricting allowed extensions to images only. Includes a CLI command to scan and clear suspicious files from the custom_options media directory.
Manages Content Security Policy rules via Magento CLI, storing them in env.php for environment-specific control without database access. Includes automatic CSP header splitting to avoid size limits on servers.
Integrates the Swiper touch slider as a Magento 2 JS Widget. Allows creation of mobile-friendly, hardware-accelerated image and content sliders.
Generates Magento catalogs from YAML configuration files. Uses direct SQL queries to create categories, products, websites, and customer groups.
Allows administrators to change a customer's password directly from the customer edit page in the Magento admin panel. Useful for customer support when customers have forgotten their credentials.
Allows you to quickly and easily remove unwanted links from your customer navigation dashboard sidebar in Magento.