[nodebb-plugin-camo] Make embedded images look secure!

Bri

Here's some more information: I can actually get it running this way, if I set the plugin to use an external camo instance, and then run camo (the one in your plugin as a dependency) like this:

~/NodeBB/node_modules/nodebb-plugin-camo/node_modules/camo$ /usr/bin/env PORT=8082 CAMO_KEY="<key generated by your plugin>" node server.js

yariplus

@Bri Just a normal Ubuntu LTS. Nothing in npm global, no node-gyp in nodebb directory.

I don't think the there's anything wrong with the key, it checks to make sure it's valid.

yariplus

@Bri Interesting, I can only think there must be something wrong with the path I give to spawn call.

Bri

@yariplus I found the problem, the child process wasn't getting the PATH variable from the parent env, so when child_process.spawn() was called on 'node' it didn't know where to find it. I've made a PR for you.

yariplus

Perfect! I figured it was something like that. Odd though.

Bri

Yeah, curious how it was working for you... I'm using nvm to manage node versions on my server, so it makes sense that the path to node would be different and require the right path in the PATH variable

yariplus

@Bri Mind testing the version I just pushed? I refactored a lot of code and got rid of the extra loader process.

Bri

Everything looks good! I deployed it to my prod server and am seeing messages in the logs from the camo server

yariplus

I pushed a small update that should make clustered setups work properly without needing a restart.

I also updated the source to use es2015, if anyone is interested in that.

julian

@yariplus mm, does that mean your plugin only works with Node v4/v5?

lenovouser

@julian nope, it is being compiled down to ES5 with babeljs IIRC

EDIT: Yes, it indeed is: https://github.com/minora-oss/nodebb-plugin-camo/blob/master/package.json#L50-L60

yariplus

Yep yep. The distributed code on NPM is babeled down. Works with node >=0.10.0

teh_g

Sorry for rezzing an old thread!

Does this make it so I don't need to manually setup Camo? Also, does this still work in the latest NodeBB?

lenovouser

@teh_g Yep, should still work and there is also the option that you don't have to set up camo manually thanks to @yariplus

teh_g

@lenovouser said in [nodebb-plugin-camo] Make embedded images look secure!:

@teh_g Yep, should still work and there is also the option that you don't have to set up camo manually thanks to @yariplus

Hmm, I will have to try this out. I was hoping to run camo and iframely on another box, but the documentation for doing that is terrible. This will at least make camo easier

Fiiily

Thanks for posting this. Should work well to neuter IP loggers and such.

yariplus

New Release 1.5.1

Back from the dead with a bunch of bug fixes, code rewrite to current node and NodeBB, and new pictures for the guide topic!

Fixed crash if camo was not installed locally.
Fixed crash if an incorrect url was specified.
Fixed crash if installed on windows.
Fixed settings not changeable after original setup.
Removed old or useless hooks.
Removed babel.
Corrected dead links and emails.
Changed compatibility to >= NodeBB 1.0.0
New docs!