Shared on Mage Dispatch · 04 May 2026
Enables -, ., and ~ within route paths by mapping them to "Dash", "Period", and "Tilda" in controller and action class names, with an example showing class naming for dashed URLs and simple install steps.
Composer-installable module that mitigates the Style Smuggler vulnerability by allowlisting email template {{block}} classes, validating grid row URL generator classes, and neutralizing Web API fatal error report output. Includes setup steps and di.xml examples to allowlist needed email blocks and guidance on checking logs for refused classes.
Stopgap hardening package for the Sansec‑disclosed StyleSmuggler RCE: Nginx/Apache request filters, a DI‑scanner CLI guard, a sanitizing module, and scripts for compromise checks, containment, and DB audits. Includes deployment, testing, and incident‑response runbooks; designed to be removed once an official fix ships.
Open-source extension for warranty management: register serialized units, let authorized dealers submit and track warranties, notify customers of status changes, and handle warranty transfers. Includes Composer-based installation steps.
Mage Dispatch is a community-run archive and bi-weekly newsletter for the Magento, Adobe Commerce and Mage-OS ecosystem. Modules, articles, security advisories and tools, hand-picked by developers and shared so good work does not disappear into the void.
Browse the latest links → Explore by topic → Submit a link → About us →
