BoxLang 🚀 A New JVM Dynamic Language Learn More...

PresideCMS Extension: ClamAV Antivirus for Presdie applications

v2.0.5+0000045 Preside Extensions

ClamAV AntiVirus for Preside

Overview

This extension provides anti virus scanning using ClamAV for files uploaded to Preside. See Wiki for complete usage documentation.

Requirements

The extension required Preside 10.10 and above.

Installation

Install the extension to your application using CommandBox:

box install preside-ext-clamav

Remote ClamAV service

As of 2.0.0, this extension offers support for ClamAV running on a separate machine from your running Preside application. For example, in a Kubernetes cluster, you may run the clamav/clamav docker image as a service that your Preside applications can communicate with.

In order to enable this feature, you must tell Preside the hostname and port of your remote service. This can be acheived either using environment variables, or by setting directly in your Config.cfc:

// in Config.cfc
settings.clamav.remoteHostname = "clamav.svc.hostname"
settings.clamav.remotePort     = 3310;
settings.clamav.remoteTimeout  = 2000; // in milliseconds
# environment variables
CLAMAV_REMOTE_HOSTNAME=clamav.svc.hostname
CLAMAV_REMOTE_PORT=3310
CLAMAV_REMOTE_TIMEOUT=2000

See Injecting environment variables in the official Preside docs for details on how to do that.

Once these settings are detected, the ClamAV extension will run in "remote server" mode.

CHANGELOG

v2.0.5

  • Update build version generator

v2.0.4

  • Do not raise errors when doing ping() healthchecks - too noisy in error monitoring when remote server disappears

v2.0.3

  • PXCLAM-6 - FileNotExists error: scary looking errors from vulnerability scanners/hackers

v2.0.2

  • #4 Add configurable remote server call timeout and make the default larger than the java client's default (now 2 seconds)

v2.0.1

  • Fix author attribution in manifest

v2.0.0

  • Add support for ClamAV running as a remote service
  • Default scanning to be turned on when settings have not yet been set

v1.0.9

  • Convert to github build system
  • Add changelog (from git logs)

v1.0.8

  • Do not read request body just to get a header

v1.0.6-7

  • Build fixes

v1.0.5

  • Add German translations

v1.0.4

  • Skip FileExists check when http / https is found in string

v1.0.3

  • Preparing for public release

v1.0.2

  • Ensures FileExists function is reading simple value only

v1.0.1

  • Adding validation of the scan binary path when saving the config form

v1.0.0

Initial build

$ box install preside-ext-clamav

No collaborators yet.
     
  • {{ getFullDate("2017-06-23T12:29:41Z") }}
  • {{ getFullDate("2024-02-22T10:50:45Z") }}
  • 3,258
  • 97,606