
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
github.com/lelandrichardson/react-native-parallax-view
Parallax view for vertical scrollview with a header image and header content
$ npm i react-native-parallax-view --save
NOTE: I will put up an rnplay.org working example whenever they support React Native 0.8.0
There is a working example in the project /example
folder that you can check out. Remember to run npm install inside
the example folder if you'd like to run that project.
cd react-native-parallax-view
cd example
npm install
Additionally, here is an example of the usage
<ParallaxView
backgroundSource={require('image!backgroundImage')}
windowHeight={300}
header={(
<Text style={styles.header}>
Header Content
</Text>
)}
>
<View>
// ... scrollview content
</View>
</ParallaxView>
Prop | Required | Default | Type | Description |
---|---|---|---|---|
backgroundSource | YES | null | object | the source prop that get's passed to the background <Image> component. If left blank, no background is rendered |
header | NO | null | renderable | any content you want to render on top of the image. This content's opacity get's animated down as the scrollview scrolls up. (optional) |
windowHeight | NO | 300 | number | the resting height of the header image. If 0 is passed in, the background is not rendered. |
... | NO | ...ScrollViewProps | {...this.props} is applied on the internal ScrollView (excluding the style prop which is passed on to the outer container) |
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.