Shared on Mage Dispatch · 07 Sep 2026
MCP with commands and prompts to manage Hyvä CMS content: list components, validate and edit JSON, create/update/publish pages, preview and render-check, and clone pages. Includes in-tool guidance/resources and a recommended editing workflow.
Configure navigation, buttons, forms, messages, and more in Admin, with values exposed as --kumar-* CSS variables for easy theme use. Supports per-scope settings (default, website, store view) and includes color pickers.
Composer-installable module that mitigates the Style Smuggler vulnerability by allowlisting email template {{block}} classes, validating grid row URL generator classes, and neutralizing Web API fatal error report output. Includes setup steps and di.xml examples to allowlist needed email blocks and guidance on checking logs for refused classes.
Stopgap hardening package for the Sansec‑disclosed StyleSmuggler RCE: Nginx/Apache request filters, a DI‑scanner CLI guard, a sanitizing module, and scripts for compromise checks, containment, and DB audits. Includes deployment, testing, and incident‑response runbooks; designed to be removed once an official fix ships.
Mage Dispatch is a community-run archive and bi-weekly newsletter for the Magento, Adobe Commerce and Mage-OS ecosystem. Modules, articles, security advisories and tools, hand-picked by developers and shared so good work does not disappear into the void.
Browse the latest links → Explore by topic → Submit a link → About us →
