Gray Safe helps Grav site maintainers and developers detect and fix malformed YAML frontmatter and keep site content consistent across locales. It provides a localhost-only web validator (Admin UI) and a CLI tool for bulk scans. The plugin enforces a single primary table in page headers, offers an auto_fix or strict mode on save, and includes locale helpers to create missing locale files and propagate properties (for example logo_size) across all locale markdown files.
Key features
- Web + CLI YAML frontmatter validator with clear error/warning output and optional auto-fix
- Admin UI: Validate YAML modal, security resources and permission control
- Primary table enforcement:
auto_fixorstrictmodes to maintain data integrity - Locale helpers: create missing locale files and bulk-apply metadata like
logo_size - Local-only validator endpoint by default (configurable LAN allow)
- Small footprint, low-risk plugin with optional license-key stub for paid workflows
Hack protection and security model
- Local-only web endpoint: the validator web endpoint is restricted to localhost by default to prevent remote abuse.
- Permission checks: only users with
admin.gray_safe_validate(oradmin.super) can run the web validator and access the Admin pages. - Rate-limiting & blocking: configurable thresholds block repeated abusive requests and record incidents to
user/data/r4it_gray_safe/ips.json. - Path privacy: responses avoid exposing absolute file system paths; only safe relative paths under
user://pagesare returned.
Pricing (starter)
- Single site: €49 (one-time)
- Developer (up to 5 sites): €199
- Agency / Unlimited: €599
- Optional yearly updates & priority support: 25% of purchase price per year
Demo & assets
- Demo ZIP:
packaging/demo.zip(minimal Grav test case included in info repo) - EULA: included in the plugin at
user/plugins/r4it_gray_safe/LICENSE.en.md
Call to action
Coming soon — Beta release. Sign up for updates and the beta waitlist at: (link placeholder)