
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@adobe/reactor-bridge
Advanced tools
Communication API between the Tags UI (Lens) and extension views.
Adobe Experience Platform Tags is a next-generation tag management solution enabling simplified deployment of marketing technologies. For more information regarding Experience Platform Tags, please visit our product website.
When a Tags user configures extensions, rules, and data elements within the Tags UI, the UI presents an extension's view within an iframe. This project provides the communication layer between the Tags UI and extension views for storage and retrieval of settings, validation, etc. It does so by exposing a simplified, abstracted API while leveraging the native postMessage browser API under the hood.
For more information about developing an extension for Experience Platform Tags, please visit our extension development guide.
The Tags UI consumes the bridge via the @adobe/reactor-bridge npm package while extension views consume the bridge by loading a CDN-hosted script as described in the extension development guide.
The communication layer consists three different pieces:
Parent (lib/parent.js): This is the portion of the communication layer that the Tags UI uses. The Tags UI uses this by importing it directly:
import { loadIframe } from '@adobe/reactor-bridge';
The arguments, return value, and behavior of loadIframe can be found within the code documentation in parent.js.
Child (dist/extensionbridge-child.js): This is the portion of the communication layer that extension views use, though extension views don't load it directly (see Child Loader). This file is hosted by the Tags UI which means it may be different based on the environment. This is important since it needs to be compatible with the Parent that is being used by the Tags UI in the same environment.
Child Loader (dist/extensionbridge.js): This loads Child. Child Loader will be loaded by extensions via a script tag. Extensions will always load the same Child Loader regardless of the environment they are running in. Child Loader then loads the environment-specific Child.
Contributions are welcomed! Read the Contributing Guide for more information.
To get started:
npm install.To run tests a single time, run the following command:
npm run test
To run tests continually while developing, run the following command:
npm run test:watch
To run a sandbox where you can manually test your changes (manipulate the sandbox directory as desired), run the following command:
npm run sandbox
To create a build, run the following command:
npm run build
The extension bridge supports the following browsers:
This project is licensed under the Apache V2 License. See LICENSE for more information.
FAQs
Communication API between the Tags UI (Lens) and extension views.
We found that @adobe/reactor-bridge demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 21 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.