Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/actions-on-google-labs/interactive-canvas-editor-nodejs
NOTE
This is an experimental project and will receive minimal maintenance. Only bugs for security issues will be accepted. No feature requests will be accepted. Pull requests will be acknowledged and reviewed as soon as possible. There is no associated SLAs.
Some of the projects in this experimental org might mature to a more stable state and move into the main Actions on Google GitHub org.
You can use this editor to create a web app for Interactive Canvas that is immediately loaded onto a smart display device. This allows for quick prototyping of web apps for Interactive Canvas.
This project uses the Node.js client library and is deployed on Cloud Functions for Firebase, Firebase Hosting and Firestore.
The typical workflow for developing an Interacive Canvas web app would require a developer to host the web app on a public HTTPS endpoint. To update the web app would require changes to be pushed to the hosting server which typically add delays to view any changes on a device.
This project provides basic editors for HTML, CSS and JavaScript which are then combined to form the HTML for the Interacive Canvas web app. Any changes to the HTML code is persisted in a Firestore database.
On the device a special wrapper Interactive Canvas action is loaded which contains an iframe which is dynamically updated with the HTML obtained from Firestore. All Interactive Canvas API's are proxied to the iframe so that the code from the editor behaves exactly like it is the main web app loaded in an Interactive Canvas Action.
To link the editor with the Interactive Canvas instance a simple code is generated on the device and which then has to be entered in the editor.
7
with 7.1.1
or above, npm install -g firebase-tools@^7.1.1
firebase login
with your Google accountagent.zip
in this sample's directory.functions
directory, run npm install
firebase deploy --project {PROJECT_ID}
to deploy the function and hosting
https://${REGION}-${PROJECT_ID}.cloudfunctions.net/dialogflowFirebaseFulfillment
Talk to my test app
.Please read and follow the steps in the CONTRIBUTING.md.
See LICENSE.
Your use of this sample is subject to, and by using or downloading the sample files you agree to comply with, the Google APIs Terms of Service.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.