Skip to content

Commit 0e3d1cd

Browse files
committed
Merge branch 'main' into feature/tree
# Conflicts: # resources/dist/inspirecms.css # src/CmsPanelProvider.php
2 parents c10e910 + ebae271 commit 0e3d1cd

File tree

110 files changed

+1382
-2551
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

110 files changed

+1382
-2551
lines changed

.github/SECURITY.md

Lines changed: 46 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,47 @@
1-
# Security Policy
1+
If you discover a security vulnerability in InspireCMS, please review the following guidelines before submitting a report. We take security very seriously, and we do our best to resolve security issues as quickly as possible.
22

3-
If you discover any security related issues, please email info@solutionforest.net instead of using the issue tracker.
3+
## Guidelines
4+
While working to identify potential security vulnerabilities in InspireCMS, we ask that you:
5+
6+
- **Privately** share any issues that you discover with us via inspirecms.com as soon as possible.
7+
- Give us a reasonable amount of time to address any reported issues before publicizing them.
8+
- Only report issues that are in scope.
9+
- Provide a quality report with precise explanations and concrete attack scenarios.
10+
11+
## Scope
12+
We are only interested in vulnerabilities that affect InspireCMS itself, tested against **your own local installation** of the software, running the latest version. You can install a local copy of InspireCMS by following these [instructions](https://inspirecms.net/).
13+
Do not test against any InspireCMS installation that you don’t own, including [InspireCMS](https://inspirecms.net/).
14+
15+
### Potentially Qualifying Vulnerabilities
16+
17+
- [Cross-Site Scripting (XSS)](https://en.wikipedia.org/wiki/Cross-site_scripting)
18+
- [Cross-Site Request Forgery (CSRF)](https://en.wikipedia.org/wiki/Cross-site_request_forgery)
19+
- [Arbitrary Code Execution](https://en.wikipedia.org/wiki/Arbitrary_code_execution)
20+
- [Privilege Escalation](https://en.wikipedia.org/wiki/Privilege_escalation)
21+
- [SQL Injection](https://en.wikipedia.org/wiki/SQL_injection)
22+
- [Session Hijacking](https://en.wikipedia.org/wiki/Session_hijacking)
23+
24+
### Non-Qualifying Vulnerabilities
25+
26+
- XSS vectors or bugs that rely on an unlikely user interaction (i.e. a privileged user attacking themselves or their own site)
27+
- Reports from automated tools or scanners
28+
- Theoretical attacks without actual proof of exploitability
29+
- Attacks that can be guarded against by following our security recommendations.
30+
- Server configuration issues outside of InspireCMS’s control
31+
- [Denial of Service](https://en.wikipedia.org/wiki/Denial-of-service_attack) attacks
32+
- [Brute force attacks](https://en.wikipedia.org/wiki/Brute-force_attack) (e.g. on password or email address)
33+
- Username or email address enumeration
34+
- Social engineering of InspireCMS staff or users of InspireCMS installations
35+
- Physical attacks against InspireCMS installations
36+
- Attacks involving physical access to a user’s device, or involving a device or network that is already seriously compromised (e.g. [man-in-the-middle attacks](https://en.wikipedia.org/wiki/Man-in-the-middle_attack))
37+
- Attacks that are the result of a 3rd party InspireCMS addon should be reported to the addon’s author
38+
- Attacks that are the result of a 3rd party library should be reported to the library maintainers
39+
- Disclosure of tools or libraries used by InspireCMS and/or their versions
40+
- Issues that are the result of a user doing something silly (like sharing their password publicly)
41+
- Missing security headers which do not lead directly to a vulnerability via proof of concept
42+
- Vulnerabilities affecting users of outdated/unsupported browsers or platforms
43+
- Vulnerabilities affecting outdated versions of InspireCMS
44+
- Any behavior that is clearly documented.
45+
- Issues discovered while scanning a site you don’t own without permission
46+
- Missing CSRF tokens on forms (unless you have a proof of concept, many forms either don't need CSRF or are mitigated in other ways) and "logout" CSRF attacks
47+
- [Open redirects](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html)

.github/workflows/fix-php-code-style-issues.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,6 @@ jobs:
2222
uses: aglipanci/laravel-pint-action@2.5
2323

2424
- name: Commit changes
25-
uses: stefanzweifel/git-auto-commit-action@v5
25+
uses: stefanzweifel/git-auto-commit-action@v6
2626
with:
2727
commit_message: Fix styling

.github/workflows/update-changelog.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
release-notes: ${{ github.event.release.body }}
2525

2626
- name: Commit updated CHANGELOG
27-
uses: stefanzweifel/git-auto-commit-action@v5
27+
uses: stefanzweifel/git-auto-commit-action@v6
2828
with:
2929
branch: main
3030
commit_message: Update CHANGELOG

CHANGELOG.md

Lines changed: 70 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,76 @@
22

33
All notable changes to `inspirecms-core` will be documented in this file.
44

5+
## 0.0.91 - 2025-06-24
6+
7+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.90...0.0.91
8+
9+
## 0.0.90 - 2025-06-23
10+
11+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.89...0.0.90
12+
13+
## 0.0.89 - 2025-06-20
14+
15+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.88...0.0.89
16+
17+
## 0.0.88 - 2025-06-20
18+
19+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.87...0.0.88
20+
21+
## 0.0.87 - 2025-06-19
22+
23+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.84...0.0.87
24+
25+
## 0.0.86 - 2025-06-19
26+
27+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.84...0.0.86
28+
29+
## 0.0.85 - 2025-06-19
30+
31+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.84...0.0.85
32+
33+
## 0.0.84 - 2025-06-19
34+
35+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.82...0.0.84
36+
37+
## 0.0.83 - 2025-06-19
38+
39+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.82...0.0.83
40+
41+
## 0.0.82 - 2025-06-18
42+
43+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.81...0.0.82
44+
45+
## 0.0.81 - 2025-06-17
46+
47+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.80...0.0.81
48+
49+
## 0.0.80 - 2025-06-17
50+
51+
- Performance tunning for MediaPicker
52+
- Add doc link and view site link on top right
53+
- Remove AssetController (replace URL logic by spatie media library)
54+
55+
### What's Changed
56+
57+
* build(deps): bump stefanzweifel/git-auto-commit-action from 5 to 6 by @dependabot in https://github.com/solutionforest/Inspirecms-core/pull/5
58+
59+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.79...0.0.80
60+
61+
## 0.0.79 - 2025-06-16
62+
63+
- Update Page component instructions on template preview
64+
65+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.78...0.0.79
66+
67+
## 0.0.78 - 2025-06-16
68+
69+
### Fix
70+
71+
- Preview with livewire
72+
73+
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.77...0.0.78
74+
575
## 0.0.77 - 2025-06-13
676

777
**Full Changelog**: https://github.com/solutionforest/Inspirecms-core/compare/0.0.76...0.0.77

CONTRIBUTING.md

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
# How to Contribute to InspireCMS
2+
3+
:sparkles: Before we get started, thank you for taking the time to contribute! :sparkles:
4+
5+
This is a guideline for contributing to InspireCMS, its documentation, and addons. All of these wonderful things are hosted here in the [InspireCMS organization](https://github.com/solutionforest/inspirecms-core) on GitHub. We welcome your feedback, proposed changes, and updates to these guidelines. We will always welcome thoughtful issues and consider pull requests.
6+
7+
#### Table of Contents
8+
9+
- [What You Should Know Before Contributing](#what-you-should-know-before-contributing)
10+
- [InspireCMS isn’t FOSS](#InspireCMS-isnt-foss)
11+
- [How to Get Support](#how-to-get-support)
12+
- [How You Can Contribute](#how-you-can-contribute)
13+
- [Which Repo?](#which-repo)
14+
- [Bug Reports](#bug-reports)
15+
- [Feature Requests](#feature-requests)
16+
- [Security Disclosures](#security-disclosures)
17+
- [Core Enhancements](#core-enhancements)
18+
- [Documentation Edits](#documentation-edits)
19+
- [Pull Requests](#pull-requests)
20+
21+
## What You Should Know Before Contributing
22+
23+
### InspireCMS isn’t FOSS
24+
25+
While InspireCMS's source code is open source, publicly available, and can be [used for free](https://inspirecms.net/#pricing) in many cases, it is proprietary. Everything in this repo, including any community-contributed code, is the property of Solution Forest Limited. For that reason there are a few limitations on how you can use the code:
26+
27+
- You cannot alter anything related to licensing, updating, version or edition checking, purchasing, first party notifications or banners, or anything else that attempts to circumvent paying for features that are designated as InspireCMS Pro features. We want to stay in business so we can better support _you_ and the community.
28+
- You can’t publicly maintain a long-term fork of InspireCMS.
29+
30+
### How to Get Support
31+
32+
If you're looking for official developer support (and you have an active license), please email us halo@inspirecms.net. We will always do our best to reply in a timely manner. **Github issues are intended for reporting bugs.**
33+
34+
## How You Can Contribute
35+
36+
### Which Repo?
37+
38+
InspireCMS is broken out into a few Github repositories. Here's a quick summary of each.
39+
40+
- [`Inspirecms-core`](https://github.com/solutionforest/Inspirecms-core) is the core package. It doesn't run by itself but is instead a dependency consumed by Laravel apps. 99% of the work goes on here.
41+
42+
### Bug Reports
43+
44+
First things first. If the bug is security related refer to our [security disclosures](#security-disclosures) procedures instead of opening an issue.
45+
46+
Next, please search through the [open issues](https://github.com/solutionforest/Inspirecms-core/issues) to see if it has already been opened.
47+
48+
If you _do_ find a similar issue, upvote it by adding a :thumbsup: [reaction](https://github.com/blog/2119-add-reactions-to-pull-requests-issues-and-comments). Only leave a comment if you have relevant information to add.
49+
50+
If no one has filed the issue yet, feel free to [submit a new one](https://github.com/solutionforest/Inspirecms-core/issues/new?template=bug.yml). Please include a clear description of the issue, follow along with the issue template, and provide and as much relevant information as possible. Code examples demonstrating the issue are the best way to ensure a timely solution to the issue.
51+
52+
### Feature Requests
53+
54+
TBC
55+
56+
### Security Disclosures
57+
58+
If you discover a security vulnerability, please review our [Security Policy](https://github.com/solutionforest/Inspirecms-core/security/policy). We will review and respond privately via email.
59+
60+
### Documentation Edits
61+
62+
InspireCMS's documentation lives in the [https://github.com/solutionforest/Inspirecms-core/tree/main/docs](https://github.com/solutionforest/Inspirecms-core/tree/main/docs) repository. Improvements or corrections to them can be submitted as a pull request.
63+
64+
### Core Enhancements
65+
66+
If you would like to work on a new core feature or improvement, first create a [Github issue](https://github.com/solutionforest/Inspirecms-core/issues) for it if there’s not one already. While we appreciate community contributions, we do remain selective about what features make it into InspireCMS itself, so don’t take it the wrong way if we recommend that you pursue the idea as an addon instead.
67+
68+
### Pull Requests
69+
70+
Pull requests should clearly describe the problem and solution. Include the relevant issue number if there is one. If the pull request fixes a bug, it should include a new test case that demonstrates the issue, if possible.
71+
72+
73+

README.md

Lines changed: 10 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,10 @@
1-
# This is my package inspirecms-core
1+
<p align="center"><img src="https://github.com/user-attachments/assets/ca52c7ca-41ed-48d2-9f85-2fd706857cf4" width="500" alt="InspireCMS Logo" /></p>
22

3+
4+
# InspireCMS Core
5+
6+
![Laravel Supported Versions](https://img.shields.io/badge/laravel-11.x/12.x-green.svg)
7+
![Filament Supported Versions](https://img.shields.io/badge/filament->=3.3-green.svg)
38
[![Latest Version on Packagist](https://img.shields.io/packagist/v/solution-forest/inspirecms-core.svg?style=flat-square)](https://packagist.org/packages/solution-forest/inspirecms-core)
49
[![GitHub Tests Action Status](https://img.shields.io/github/actions/workflow/status/solution-forest/inspirecms-core/run-tests.yml?branch=main&label=tests&style=flat-square)](https://github.com/solutionforest/inspirecms-core/actions?query=workflow%3Arun-tests+branch%3Amain)
510
[![GitHub Code Style Action Status](https://img.shields.io/github/actions/workflow/status/solution-forest/inspirecms-core/fix-php-code-styling.yml?branch=main&label=code%20style&style=flat-square)](https://github.com/solutionforest/inspirecms-core/actions?query=workflow%3A"Fix+PHP+code+styling"+branch%3Amain)
@@ -9,11 +14,10 @@
914

1015
InspireCMS is the foundation library that powers the InspireCMS platform. This package provides essential functionality, including content management, admin interfaces, and extensibility features. Designed with flexibility and developer experience in mind, it allows you to quickly build customized content management systems for your Laravel applications.
1116

12-
## Testing
17+
## Support
18+
19+
We provide official developer support on [InspireCMS Pro](https://inspirecms.net/#pricing) projects.
1320

14-
```bash
15-
composer test
16-
```
1721

1822
## Contributing
1923

@@ -27,15 +31,6 @@ Please see [CHANGELOG](CHANGELOG.md) for more information on what has changed re
2731

2832
Please review [our security policy](../../security/policy) on how to report security vulnerabilities.
2933

30-
## Credits
31-
32-
- [carly](https://github.com/solutionforest)
33-
- [All Contributors](../../contributors)
34-
35-
## License
36-
37-
The MIT License (MIT). Please see [License File](LICENSE.md) for more information.
38-
3934
## Resources
4035

41-
* [Documentation](./docs/index.md)
36+
* [Documentation](https://inspirecms.net/)

composer.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@
2727
"filament/spatie-laravel-translatable-plugin": "^3.2",
2828
"guava/filament-icon-picker": "^2.0",
2929
"khatabwedaa/blade-css-icons": "^1.5",
30-
"pboivin/filament-peek": "^2.0",
30+
"pboivin/filament-peek": "^2.4",
3131
"solution-forest/filament-field-group": "^1.0.14",
3232
"solution-forest/inspirecms-support": "self.version",
3333
"spatie/laravel-package-tools": "^1.15.0",

config/inspirecms.php

Lines changed: 1 addition & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,7 @@
6060
'override_plugins' => [
6161
'field_group_models' => true, // Whether to override field group models
6262
'spatie_permission' => true, // Whether to override Spatie Permission package functionality
63+
'filament_peek' => true, // Whether to override Filament Peek package functionality
6364
],
6465
],
6566

@@ -169,14 +170,6 @@
169170
*/
170171
'should_map_video_properties_with_ffmpeg' => false,
171172

172-
/**
173-
* HTTP middleware applied to media requests
174-
*/
175-
'middleware' => [
176-
SetUpPoweredBy::class,
177-
'cache.headers:public;max_age=2628000;etag',
178-
],
179-
180173
/**
181174
* Responsive image generation settings
182175
*/
@@ -416,11 +409,6 @@
416409
],
417410

418411
'template' => [
419-
/**
420-
* Default template theme for the CMS
421-
*/
422-
'default_theme' => 'manifest',
423-
424412
/**
425413
* The prefix for the component names used in the CMS
426414
*/

0 commit comments

Comments
 (0)