LoginSign Up
← Back to all sparks
S

Solidus

E-COMM
Velocity5.0

Open source Ruby on Rails e-commerce platform

solidus.io ↗

solidus_admin 0.5.1 patches two security advisories a month after the 0.5.0 feature release.

ecommerceadmin-uirailssecurity-fixesopen-source
◆Current state
solidus_admin, Solidus's newer admin interface, shipped 0.5.0 in October with editors for tax rates, payment methods, stores, zones, stock locations and option types, plus a move from Geared Pagination to Kaminari. 0.5.1 follows with fixes for two GitHub security advisories, after 0.4.1 fixed a stored XSS earlier in October.
◆Where it's heading
The new admin is filling in feature coverage while receiving its first steady flow of security reports, a sign it is seeing real production use. Security patches are arriving roughly monthly.
◆Prediction
Expect further 0.5.x security patches and more settings editors before a 0.6.0; the entries do not show its timing.

◆Recent moves

  1. 8d ago

    solidus_admin 0.5.1 fixes two security advisories

    Fixes two published security advisories in the new admin, the second security release in a month. Stores running solidus_admin should upgrade.

    View source ↗
  2. 1mo ago

    Solidus admin 0.5.0 adds settings editors, moves to Kaminari

    The first feature release of solidus_admin since 0.4.0 adds editors for tax rates, payment methods, stores, zones, stock locations and option types, plus faster index pages. Pagination moves to Kaminari, which breaks custom index components, and the minimum is now Solidus 4.6 and Ruby 3.2. It brings the new admin closer to covering what the legacy backend does.

    View source ↗
  3. 1mo ago

    solidus_admin 0.4.1 fixes stored XSS on Items Purchased page

    Escapes product names, variant options and SKUs that were rendered as raw HTML on the customer Items Purchased page. Stores on solidus_admin 0.3.0–0.4.0 should upgrade, but it adds no capability.

    View source ↗