
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@advanced-rest-client/paper-fab-menu
Advanced tools
A material design floating action button with menu items
Material design: Floating Action Button
A floating action button represents the primary action in an application.
Use the <paper-fab-menu>
to display menu-like fab buttons and to promote actions.
<paper-fab-menu icon="add">
<paper-fab mini title="Favorites" icon="star"></paper-fab>
<paper-fab mini title="Refresh" icon="refresh"></paper-fab>
<paper-fab mini title="Text label" label="D"></paper-fab>
</paper-fab-menu>
import { LitElement, html } from 'lit-element';
import '@advanced-rest-client/paper-fab-menu/paper-fab-menu.js';
class SampleElement extends LitElement {
render() {
return html`
<paper-fab-menu icon="add">
<paper-fab mini title="Favorites" icon="star"></paper-fab>
<paper-fab mini title="Refresh" icon="refresh"></paper-fab>
<paper-fab mini title="Text label" label="D"></paper-fab>
</paper-fab-menu>
`;
}
}
customElements.define('sample-element', SampleElement);
Style the menu using <paper-fab>
variables.
The element uses --paper-fab-menu-background-color
variable to set a
background color or the main <paper-fab>
element.
git clone https://github.com/@advanced-rest-client/paper-fab-menu
cd paper-fab-menu
npm install
npm start
npm test
3.0.0 (2019-07-17)
@apply
from styles (a9bcf8fa8ed88aff67b7496361c51481b8971e80)FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.