UMB.FYI 2026-02-04

Umbraco HQ

Introducing Umbraco Compose (4 minute read)

Filip Bech-Larsen introduces Umbraco Compose, a data orchestration platform designed to streamline data management in complex enterprise projects. It offers flexibility, scalability, and fast adaptability, utilizing GraphQL for efficient data delivery. Umbraco Compose integrates seamlessly with various systems, promising to save development time and enhance workflows while evolving alongside business needs.

[ @Umbraco ] [ #umbracocompose ]

Community

Mitigating CVE-2025-67288 in Umbraco 13 (if you feel you need to) (6 minute read)

Jason Elkin critiques CVE-2025-67288, arguing it misrepresents Umbraco's security regarding PDF uploads with embedded JavaScript. He asserts that Umbraco does not process such files for remote code execution or XSS vulnerabilities. Elkin proposes implementing an IFileStreamSecurityAnalyzer to enhance file safety checks, mitigating potential risks effectively.

[ #javascript ] [ #security ]

Skrift Issue #124 (16 minute read)

Featuring guest posts by Nathaniel Nunes on "Using Serilog Enrichers with Umbraco" and Georgina Bidder on "Not Your Usual Compliance Monitoring Tool"

[ @Skrift ] [ #skrift ]

Solving Port Conflicts in AI-Assisted Development: HTTP over Named Pipes (5 minute read)

Matt Brailsford discusses how AI coding assistants have transformed his workflow, particularly through the use of git worktrees for parallel development. He addresses the "Port Discovery Problem" when multiple demo sites need to run simultaneously, proposing a solution using named pipes for local communication, enhancing reliability and simplifying tooling.

[ @Matt Brailsford ] [ #ai ] [ #git ]

---

Join 700+ professionals getting the latest news, events and media from the Umbraco community delivered straight to their inbox

---

Customizing Umbraco ModelsBuilder Output (4 minute read)

Søren Kottal discusses customizing Umbraco's ModelsBuilder by creating a custom ModelsGenerator that post-processes generated files. This method allows developers to add strongly-typed property alias constants, enhancing code safety and IntelliSense support while maintaining compatibility with Umbraco's existing infrastructure. The approach avoids modifying core code, ensuring maintainability.

[ @Søren Kottal ] [ #modelsbuilder ]

Handling editor-injected JavaScript in Umbraco v17 with Umbraco Community CSPManager (3 minute read)

Debasish Gracias discusses implementing a Content Security Policy (CSP) for Umbraco v17, focusing on allowing editors to embed JavaScript securely. He outlines a method to automatically inject CSP nonces into editor-supplied script tags, ensuring compliance with strict CSP settings while maintaining flexibility for content creators.

[ #javascript ] [ #security ]

Released: Umbraco Compose example project (2 minute read)

The Umbraco Compose example project by Jeroen Breuer is a C# client library and CLI that facilitates cross-collection content composition with automatic reference expansion. It includes ready-made examples, a comprehensive CLI for setup and queries, and supports CRUD operations across environments, collections, and schemas.

[ #github ] [ #umbracocompose ]

Watch & Listen

Umbraco Compose Unboxing (48 minute watch)

In the unboxing video, Umbraco HQ's Alan Smith and Lassa explore Umbraco Compose, a platform that simplifies data management in complex enterprise projects. They discuss its core features, including type schemas and web hooks, which enhance data orchestration and streamline integration across various systems.

[ @Umbraco ] [ #umbracocompose ] [ #unboxing ]

Umbraco Compose - From Complexity to Clarity (2 minute watch)

Umbraco HQ introduces Umbraco Compose, a solution to transform complex, tangled architectures into clean, composable systems. By orchestrating data from various platforms into a single headless API output, Umbraco Compose enhances control and performance, allowing businesses to adapt and scale efficiently without disruption. Embrace clarity over chaos with Umbraco Compose.

[ @Umbraco ] [ #umbracocompose ]

umbraCoffee - New Year, new U?! (51 minute watch)

In this episode of #umbraCoffee, Marcin and Callum discuss their winter experiences, the growth of the Umbraco community, and developments in web frameworks like Tailwind and Astro. They highlight upcoming events, community engagement, security concerns, and the importance of AI integration and ISO certification for Umbraco.

[ @UmbraCoffee ] [ #ai ] [ #umbracoffee ] [ #umbracoforms ]