mixcore / mix.core Goto Github PK

🚀 Mixcore CMS is an Future-Proof Enterprise Web CMS that supports both headless and decoupled to easily build any kinds of app/web app/all in all/customizable APIs built on top of ASP.NET Core / Dotnet Core. It is a completely open-source ASP.NET Core (Dotnet Core) CMS solution. https://mixcore.org

Home Page: https://mixcore.org

License: MIT License

C# 100.00% Dockerfile 0.01%

dotnet asp-net-core dotnet-core dotnetcore mixcore-cms cms headless-cms ecommerce bootstrap asp

mix.core's Introduction

Mixcore CMS

Fully Open Source UI Tools to create multi-purpose Enterprise Web Apps, Mobile Apps & Application Services

Branchs

master: Mixcore v1.0.x LTS
develop: Mixcore v2.0.0-alpha.x

UI Screenshots

Admin Portal

Mixcore CMS Back-office is built on top of the much awaited Bootstrap 5. This makes starting a new project very simple. It also provides benefits if you are already working on a Bootstrap 5 project.

(New Portal in Angular / Svelte will be coming soon)

Special features (Out of the box)

Architecture

CMS and Dashboards built on top of ASP.Net Core / Dotnet Core, SignalR, Angular / Bootstrap / React / Vue / Svelte.

Services	Result	Services	Result
Github workflow
Travis CI		AppVeyor CI
Gitter		Licenses status
Codefactor		Azure

References

	Links
STAG / Demo	https://demo.mixcore.org https://dev.mixcore.org https://v2.dev.mixcore.org https://mochahost.demo.mixcore.org/portal (administrator / P@ssw0rd)
Swagger (v2)	https://v2.dev.mixcore.org/api/v2/mixcore/swagger/index.html
Dev docs	https://docs.mixcore.org / https://mixcore.dev
Community	https://community.mixcore.org
Youtube	https://www.youtube.com/channel/UChqzh6JnC8HBUSQ9AWIcZAw
Twitter	https://twitter.com/mixcore_cms
Medium	https://medium.com/mixcore

Ref: How to install Mixcore CMS with Azure Docker Composer

Run with Docker

Latest Docker Image

docker pull ghcr.io/mixcore/mix.core:master
docker run -it --rm -p 5000:80 --name mixcore_cms mixcore/mix.core:latest

Or with Docker Compose

docker-compose build
docker-compose up

GITs clone

mkdir mixcore
cd mixcore

git clone https://github.com/mixcore/mix.core.git

Optional:

Optional steps as those packages are Nuget Library

git clone https://github.com/mixcore/mix.heart.git
git clone https://github.com/mixcore/mix.identity.git

Build & Run with Dotnet SDK

Build & Run Mixcore CMS

REM Make sure you already read and download Dotnet Core SDK here https://dotnet.microsoft.com/download

cd mix.core/src/Mix.Cms.Web

dotnet restore
dotnet build
dotnet run

Modify & Build Portal Front-End source (Optional)

This step is optional and only needed in case you would like to modify the portal front-end code

cd mix.core/src/portal-app

npm install
npm install --global gulp-cli
gulp build

Note: If you facing any System.Data.SqlClient.SqlException error, please replace all content inside "appsettings.json" file with "{}".

Thanks to

This project has been developed using:

License

Mixcore CMS is licensed under the MIT

Permissions	Limitations	Conditions
✔ Commercial use	✖ Liability	ℹ License and copyright notice
✔ Modification	✖ Warranty
✔ Distribution
✔ Private use

Activity

Star History

Contributors Wall

How to contribute

Fork this repo to your GitHub account, clone it locally and try to follow the following simple guidelines.

Never write any code in the master branch
When writing code, do it in a specific feature branch
Send your pull request from that feature branch
After your pull request has been accepted, sync the changes into master from the upstream remote
Delete you feature branch
Again, NEVER write any code in the master branch ;)
Ref: https://datasift.github.io/gitflow/IntroducingGitFlow.html

mix.core's People

Contributors

Stargazers

Watchers

Forkers

smilefounder smileway gitter-badger fossabot crazyants abhay-singh oneplustree developeramarish raihansazal randianb 5118234 bionstt nhathoang989 truongngomb kenszeapp retail-ecommerce dev-sites 72psm lukaszsoleski asilmertkan laosandegudai cawa0505 theinternetgy robinson fredyfx ceritli xiaopohou kuleyu mhkarami97 agefer sicollins insurshawn gadisosa vision-play-media svemulapalli sansob 5l1v3r1 mceylan35 muratgundes cryoland noriffik cedest ottenbel starlying moigarm chidev teksoi anwarul gazi786 devsontech rodrigofdz abhiongithub lirim-sulejmani mdasocial dockiem priest671 debocktim isaacky garora midas-phoenix intelligent2610 moslem-hadi arielcortez carmelopz wangchengqun ali-alhuwswe iotspace exstyle oziriz31 miguelbandera bassmabatikh weedkiller lucasapoena bramotiti atikhan aupv9 uzbekdev1 chengjingfeng asifshikder jlwashington olegnadymov tayfunuyar sissinho997 universal-mixcore rubengrb ngeniedeveloper leelu611 aistan-inc simhaonline teppi210 osese rfesi andangel bubdm atefsobhy shamestabrez brsaifdev scherenhaenden donhuvy vbjay

mix.core's Issues

CVE-2019-1010266 (Medium) detected in lodash-1.0.2.tgz

CVE-2019-1010266 - Medium Severity Vulnerability

Vulnerable Library - lodash-1.0.2.tgz

A utility library delivering consistency, customization, performance, and extras.

Library home page: https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz

Path to dependency file: /mix.core/src/portal-app/package.json

Path to vulnerable library: /tmp/git/mix.core/src/portal-app/node_modules/globule/node_modules/lodash/package.json,/tmp/git/mix.core/src/portal-app/node_modules/globule/node_modules/lodash/package.json

Dependency Hierarchy:

gulp-3.9.1.tgz (Root Library)
- vinyl-fs-0.3.14.tgz
  - glob-watcher-0.0.6.tgz
    - gaze-0.5.2.tgz
      - globule-0.1.0.tgz
        
        ❌ lodash-1.0.2.tgz (Vulnerable Library)

Found in HEAD commit: a2b22807b3ced578bb7bd702379f65aafa385088

Vulnerability Details

lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is: 4.17.11.

Publish Date: 2019-07-17

URL: CVE-2019-1010266

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010266

Release Date: 2019-07-17

Fix Resolution: 4.17.11

Step up your Open Source Security Game with WhiteSource here

Error page Backend

Add icon ddl for micon

Portal > Change item order in list view not work

Ref:

http://dev.mixcore.org/portal/permission/list

@Sint94 @nhathoang989

Simple CAPTCHA

Apply Web worker

https://techtalk.vn/html5-web-worker-data-transferring.html

Module field encryption option/flag

As an admin, I want to manage Navigation easily in admin portal

Add version info to the CMS/DB.

Add version info to the portal footer, so the admin can be aware of which version they are using.

CMS version
Database version

add cms info in footer

Cron job feature

Flash screen after register an admin account

Expectation: Create an admin account should redirect to login page instead of dashboard page

Coming Soon Page & Maintenance Mode

Move cms system setting to other json configuration file (not app.json)

Unhandled Exception: System.FormatException: Could not parse the JSON file. Error on line number '0': ''. ---> Newtonsoft.Json.JsonReaderException: Error reading JObject from JsonReader. Path '', line 0, position 0.

Step to reproduce:

dotnet run in the command line
Load to init page
Do nothing, close command line
dotnet run again

Unhandled Exception: System.FormatException: Could not parse the JSON file. Error on line number '0': ''. ---> Newtonsoft.Json.JsonReaderException: Error reading JObject from JsonReader. Path '', line 0, position 0.
   at Newtonsoft.Json.Linq.JObject.Load(JsonReader reader, JsonLoadSettings settings)
   at Newtonsoft.Json.Linq.JObject.Load(JsonReader reader)
   at Microsoft.Extensions.Configuration.Json.JsonConfigurationFileParser.ParseStream(Stream input)
   at Microsoft.Extensions.Configuration.Json.JsonConfigurationProvider.Load(Stream stream)
   --- End of inner exception stack trace ---
   at Microsoft.Extensions.Configuration.FileConfigurationProvider.Load(Boolean reload)
   at Microsoft.Extensions.Configuration.FileConfigurationProvider.Load()
   at Microsoft.Extensions.Configuration.ConfigurationRoot..ctor(IList`1 providers)
   at Microsoft.Extensions.Configuration.ConfigurationBuilder.Build()
   at Microsoft.AspNetCore.Hosting.WebHostBuilder.BuildCommonServices(AggregateException& hostingStartupErrors)
   at Microsoft.AspNetCore.Hosting.WebHostBuilder.Build()
   at Mix.Cms.Web.Program.Main(String[] args) in E:\_Workspace\Github\mixcore\mix.core\src\Mix.Cms.Web\Program.cs:line 13

Script and Style in Master Layout doesn't work

API pair token key method

Add system log to admin portal

Add import link to download the template for portal > import

Add/Cleanup UI
Add template file

sitemap.xml

Questons - Markdown and Headless?

Hi there,

Great work on this project. I'm interested in knowing a little more about this project.

Do the posts / content support markdown?
Can this be used like a headless CMS?
I was wondering if it would be possible to be able to use the headless api side in an older asp.net mvc5 app ?
Is there any documentation on how to add this to an existing asp.net core application with layout.cshtml?

Limit Login Attempts

ACE editor not update value on paste

caught (in promise) TypeError: $.notify is not a function

Expected behavior

I should be able to login

Actual behavior

Error getting displayed on console and not able to login. the screen is just showing waiting image

Step to reproduce

Clean up setting page and sections

Define membership flows and permission

CVE-2018-16487 (High) detected in lodash-1.0.2.tgz

CVE-2018-16487 - High Severity Vulnerability

Vulnerable Library - lodash-1.0.2.tgz

A utility library delivering consistency, customization, performance, and extras.

Library home page: https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz

Path to dependency file: /mix.core/src/portal-app/package.json

Dependency Hierarchy:

gulp-3.9.1.tgz (Root Library)
- vinyl-fs-0.3.14.tgz
  - glob-watcher-0.0.6.tgz
    - gaze-0.5.2.tgz
      - globule-0.1.0.tgz
        
        ❌ lodash-1.0.2.tgz (Vulnerable Library)

Found in HEAD commit: a2b22807b3ced578bb7bd702379f65aafa385088

Vulnerability Details

A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep can be tricked into adding or modifying properties of Object.prototype.

Publish Date: 2019-02-01

URL: CVE-2018-16487

CVSS 3 Score Details (9.8)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16487

Release Date: 2019-02-01

Fix Resolution: 4.17.11

Step up your Open Source Security Game with WhiteSource here

Renaming all source base with better naming convention

Medias management and filtering

Fix card header in portal to h6

Cleanup code from old repos

Language management system

More initial wizard during installation

Remove debug code

Init > Step 1 > DB name between input field and connection string field are not consistence

Describe the bug
Init > Step 1 > DB name between the input field and connection string field are not the same.

To Reproduce
Steps to reproduce the behavior:

Go to 'Init step 1' screen
See error

Expected behavior
Init > Step 1 > DB name between the input field and connection string field should be the same.

Screenshots

Hide all ecom features

Fav menu in admin portal

Add version # to APIs

Portal > Breadcrumb

now-ui call carosel + tooltip issues

Clean up admin UI

Email management

Are there any plan for using angular7?

CVE-2018-3721 (Medium) detected in lodash-1.0.2.tgz

CVE-2018-3721 - Medium Severity Vulnerability

Vulnerable Library - lodash-1.0.2.tgz

A utility library delivering consistency, customization, performance, and extras.

Library home page: https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz

Path to dependency file: /mix.core/src/portal-app/package.json

Dependency Hierarchy:

gulp-3.9.1.tgz (Root Library)
- vinyl-fs-0.3.14.tgz
  - glob-watcher-0.0.6.tgz
    - gaze-0.5.2.tgz
      - globule-0.1.0.tgz
        
        ❌ lodash-1.0.2.tgz (Vulnerable Library)

Found in HEAD commit: a2b22807b3ced578bb7bd702379f65aafa385088

Vulnerability Details

lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property that will exist on all objects.

Publish Date: 2018-06-07

URL: CVE-2018-3721

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: High
- Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2018-3721

Release Date: 2018-06-07

Fix Resolution: 4.17.5

Step up your Open Source Security Game with WhiteSource here

mixcore / mix.core Goto Github PK

mix.core's Introduction

Mixcore CMS

Fully Open Source UI Tools to create multi-purpose Enterprise Web Apps, Mobile Apps & Application Services

Branchs

UI Screenshots

Admin Portal

Special features (Out of the box)

Architecture

CMS and Dashboards built on top of ASP.Net Core / Dotnet Core, SignalR, Angular / Bootstrap / React / Vue / Svelte.

References

Run with Docker

Latest Docker Image

Or with Docker Compose

GITs clone

Build & Run with Dotnet SDK

Build & Run Mixcore CMS

Modify & Build Portal Front-End source (Optional)

Thanks to

License

Activity

Star History

Contributors Wall

How to contribute

mix.core's People

Contributors

Stargazers

Watchers

Forkers

mix.core's Issues

CVE-2019-1010266 - Medium Severity Vulnerability

Expected behavior

Actual behavior

Step to reproduce

CVE-2018-16487 - High Severity Vulnerability

CVE-2018-3721 - Medium Severity Vulnerability

Recommend Projects

Recommend Topics

Recommend Org