
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
github.com/trendmicro-frontend/react-tooltip
React Tooltip
Demo: https://trendmicro-frontend.github.io/react-tooltip
npm install --save react @trendmicro/react-tooltip
@trendmicro/react-tooltip
and its styles in your application as follows:import { Tooltip, Infotip } from '@trendmicro/react-tooltip';
// Be sure to include styles at some point, probably during your bootstraping
import '@trendmicro/react-tooltip/dist/react-tooltip.css';
// Right tooltip
<Tooltip content="Config settings">
<button>Settings</button>
</Tooltip>
// Right tooltip with a function content
<Tooltip
content={() => {
return (<span style={{ whiteSpace: 'nowrap' }}>{'Right tooltip'}</span>);
}}
>
<sapn>Hover on me</span>
</Tooltip>
// Top tooltip
<Tooltip placement="top" content="Top tooltip"><sapn>Hover on me</span></Tooltip>
// Infotip
<Infotip content="This is a simple example for infotip.">
<span className="icon icon-info-sign" />
</Infotip >
<Infotip placement="rightTop" content="This is a simple example for infotip.">
<span className="icon icon-info-sign" />
</Infotip >
<Infotip
tooltipStyle={{ wordWrap: 'break-word' }}
content="Pneumonoultramicroscopicsilicovolcanoconiosis is the longest word. Start01234567890123456789012345678901234567890123456789012345678901234567890123456789End Start0123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789End"
>
<span>Hover on me (infotip with long article)</span>
</Infotip>
Name | Type | Default | Description |
---|---|---|---|
placement | string | 'right' | One of: 'top', 'right', 'bottom' and 'left'. Tooltip will display at placement if possible, otherwise tooltip adjust it's location automatically. |
enterDelay | number | 0 | The delay length (in ms) before the tooltip appears. |
leaveDelay | number | 0 | The delay length (in ms) before the tooltip disappears. |
hideOnClick | boolean | false | Hide tooltip when target been clicked. |
disabled | boolean | false | Disable tooltip. |
tooltipClassName | string | The className apply to tooltip itself. You can use it to override style if need. | |
tooltipStyle | object | The style apply to tooltip itself. You can use it to override style if need. | |
content | node or function | The tooltip content. Required. |
Name | Type | Default | Description |
---|---|---|---|
placement | string | 'rightBottom' | One of: 'rightTop', 'rightBottom', 'leftTop', and 'leftBottom'. Tooltip will display at placement if possible, otherwise tooltip adjust it's location automatically. |
enterDelay | number | 0 | The delay length (in ms) before the infotip appears. |
leaveDelay | number | 0 | The delay length (in ms) before the infotip disappears. |
hideOnClick | boolean | false | Hide infotip when target been clicked. |
disabled | boolean | false | Disable infotip. |
tooltipClassName | string | The className apply to infotip itself. You can use it to override style if need. | |
tooltipStyle | object | The style apply to infotip itself. You can use it to override style if need. | |
content | node or function | The infotip content. Required. |
MIT
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.