collective.hardening

collective.hardening is an add-on designed to enhance Plone security by adding configurable features that help safeguard your site.

Features

• Dedicated Control Panel Easily configure security-related settings from one central location.

• File Type Restrictions Control which file types (by extension or MIME type) can be uploaded to your site.

• Additional Improvements (TDB) Further enhancements are planned for upcoming releases.

Control Panel

A new control panel, accessible at /@@hardening-controlpanel, allows you to fine-tune the add-on's security settings. Through this interface, you can define which file types are permissible and ensure that only safe files are uploaded to your Plone site. You can access the control panel under the Security section of the main Plone control panel.

File Type Restrictions

Using the control panel, you can specify disallowed MIME types or file extensions. This flexibility helps prevent the upload of potentially harmful files, bolstering your site's security.

The implementation is based on:

1. Event subscribers active on created or modified objects.
2. A widget validator that checks the file type on upload.

Installation

To install collective.hardening, add it to your buildout configuration as follows:

[instance]
eggs +=
    collective.hardening

After updating the configuration, run buildout:

bin/buildout

And restart your Plone instance.

Authors

The Syslab.com team.

Contributors

Put your name here, you deserve it!

• Alessandro Pisa, Syslab.com

Contribute

• Issue Tracker: https://github.com/collective/collective.hardening/issues
• Source Code: https://github.com/collective/collective.hardening

Support

If you are having issues, please let us know in the issue tracker.

License

The project is licensed under the GPLv2.

Contributors

• ale-rt, alessandro.pisa@gmail.com

Changelog

0.0.2 (2025-01-15)

• Allow Python 3.8. [ale-rt]

0.0.1 (2025-01-15)

• Initial release. [ale-rt]