danslo

APSB23-50

https://helpx.adobe.com/security/products/magento/apsb23-50.html

Privilege Escalation

The vulnerability with the highest CVSS score of 8.8 (CVE-2023-38218) states that it is an unauthenticated privilege escalation due to improper input validation.

If we look at the diff we see a number of security related changes. One of those changes is the following in Magento\Customer\Plugin\Webapi\Controller\Rest\ValidateCustomerData::validateInputData:

erikhansen

Running Warden on Windows with WSL 2

See this Github comment thread for any issues or additional context for getting Warden running on Windows with WSL 2.

The instructions below cover how to install Warden on Windows, using WSL 2.

1. Install Ubuntu 20 LTS in WSL 2
   1. To access the shell/terminal inside of Ubuntu WSL, open the Ubuntu 20.04 program that will have been installed in the step above (If you want to be able to copy/paste, see here. Going forward, this article assumes you will run all commands inside of the Ubuntu terminal
2. Install Docker Desktop (these instructions were tested using Docker 4.9.0 on June 13th, 2022)
3. Install homebrew `

peterjaap

<?php
/**
 * Copyright © Magento, Inc. All rights reserved.
 * See COPYING.txt for license details.
 */

use Magento\Framework\App\Bootstrap;
use Magento\Framework\DB\Adapter\AdapterInterface;
use Magento\Framework\DB\Query\Generator;
use Magento\Framework\DB\Select\QueryModifierFactory;

molotovbliss

Speed up warden for faster importing of large sql dumps.

1. Add the innodb options to the warden/environments/magento2.base.yml docker-compose YML file.
2. Restart warden environment warden env down && warden sync stop && warden env up -d && warden sync start
3. Import the .sql file with warden db import.
4. Remove options & restart warden enviornment once import completed.

Why these settings

• innodb_buffer_pool_size : Will cache frequently read data

navarr

Magento Minor Version	PHP 5.5	PHP 5.6	PHP 7.0	PHP 7.1	PHP 7.2	PHP 7.3	PHP 7.4
2.0	✓	✓	✓	✗	✗	✗	✗
2.1	✗	✓	✓[1]	2.1.16+	✗	✗	✗
2.2	✗	✗	✓[2]	✓	2.2.10+	✗	✗
2.3	✗	✗	✗	✓[3]	✓	2.3.3+	✗
2.4	✗	✗	✗	✓[3]	✓	✓	✗

Notes:

1. Only 7.0.2 and ~7.0.6 for 2.1.0-2.1.1. Starting with 2.1.2 that was expanded to include 7.0.4.

pinkeen

Magento Cloud helper scripts

I drop them into the root project's dir and push them to the repo. Mostly they should use whatever env you've got checked out with magento-cloud command.

Tested only on Mac with Pro/Stage envs, use at your own risk YMMV.

Tip: You can adjust .gitignore like this for convenience:

rafaelstz

Top modules for Magento 2

I update this page to have the top Magento 2 modules for performance, development, ux and more.

Performance

Check the store performance tips in an admin panel dashboard

https://github.com/magehost/performance-dashboard

rafaelstz

Use both files in your root folder and run:

curl -LO https://deployer.org/deployer.phar && sudo mv deployer.phar /usr/local/bin/dep && sudo chmod +x /usr/local/bin/dep
composer require deployer/recipes --dev
composer require rafaelstz/deployer-magento2 dev-master --dev

fcamblor

Simply include debug-requirejs-loading.js script before starting your requirejs dependencies :

<script src="scripts/require.js"></script>
<script src="path/to/debug-requirejs-loading.js"></script>
<script type="text/javascript">
require(['data/main'], function(){ console.log("requirejs started !"); });
</script>

It will show :

dkorn

---

- name: Compile NGINX from sources
  hosts: webserver
  vars:
    nginx_version: nginx-1.13.4
    nginx_tarball_url: "http://nginx.org/download/{{ nginx_version }}.tar.gz"
    nginx_install_dir: "/tmp/{{ nginx_version }}"
    nginx_sbin_path: "/usr/sbin/nginx"
    nginx_conf_path: "/etc/nginx/nginx.conf"