https://github.com/mautic/package-checker
https://github.com/mautic/package-checker
Last synced: 3 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/mautic/package-checker
- Owner: mautic
- Created: 2024-03-14T14:27:23.000Z (over 1 year ago)
- Default Branch: feature/base
- Last Pushed: 2024-03-18T10:00:53.000Z (over 1 year ago)
- Last Synced: 2024-10-29T18:48:34.655Z (8 months ago)
- Language: PHP
- Size: 33.2 KB
- Stars: 0
- Watchers: 15
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Mautic Marketplace allowlist
During the Mautic Marketplace beta (introduced in Mautic 4.1), we are using an allowlist to explicitly define plugins that we know work correctly with Mautic 4.
**Important note**: Mautic caches `allowlist.json` for 60 minutes (3600 seconds) by default. If you want to set a custom cache timeout, set `marketplace_allowlist_cache_ttl_seconds` to any number you want in your `app/config/local.php`.
### Items in the JSON list
| key | meaning | type
| --- | --- | --- |
| package | Package name as found on Packagist | required |
| display_name | Human readable name that will be displayed in the Marketplace user interface | optional |
| minimum_mautic_version | Minimum Mautic version that this item will be visible in. Example: 4.1.0 means that the package will show up in Mautic 4.1.0 and higher. | optional |
| maximum_mautic_version | Maximum Mautic version that this item will be visible in. Example: 4.1.0 means that this package will show up in Mautic 4.1.0 and lower. | optional |
### Next Features
- [x] Validate evil PHP methods
- [ ] Validate readable files (.env,json,ini,etc)
- [ ] Validate permissions for files and folders
- [ ] Validate sql injection
- [ ] Validate XSS
- [ ] If plugin is used without activation