
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@db-ui/ngx-components
Advanced tools
An Angular library containing all styles & components of DB UX Design System (technical components).
Note: Find more information about specific components here
npm i @db-ui/ngx-components
Note: This will install
@db-ui/foundations
and@db-ui/components
as well which contains thecss
/scss
files
Import the styles in scss
or css
. Based on your technology the file names could be different.
../assets
@db-ui/foundations/assets
~@db-ui/foundations/assets
// styles.scss
@forward "@db-ui/components/build/styles/rollup";
/* styles.css */
@import "@db-ui/components/build/styles/rollup.css";
Note: The
relative
file contains optional and all components styles. If you consider performance issues see @db-ui/components for more information.
The current default development config in angular.json
doesn't use output hashing. This may cause an issue loading the fonts. Look at this for more information.
As a solution add "outputHashing": "media"
to configurations/development
inangular.json
.
//app.component.ts
import { DBButton } from '@db-ui/ngx-components';
@Component({
// ...
imports: [
// ...,
DBButton
],
standalone: true
// ...
})
<!-- app.component.html -->
<db-button variant="brand">Button</db-button>
There are 3 ways to use Events in Angular:
<db-input
label="Inputfield"
name="input-name"
[(ngModel)]="inputModel"
></db-input>
<db-input
label="Inputfield"
name="input-name"
[formControl]="inputControl"
></db-input>
<db-input
label="Inputfield"
name="input-name"
(change)="inputModel = $event.target.value"
></db-input>
As we'd like to perfectly support our users and customers on their digital journey, the usage of Deutsche Bahn brand and trademarks are bound of clear guidelines and restrictions even when being used with the code that we're provide with this product; Deutsche Bahn fully reserves all rights regarding the Deutsche Bahn brand, even though that we're providing the code of DB UI products free to use and release it under the Apache 2.0 license. Please have a look at our brand portal at https://marketingportal.extranet.deutschebahn.com/ for any further questions and whom to contact on any brand issues.
You must remove or replace any Deutsche Bahn brand and design assets as well as protected characteristics and trademarks. We're even also planning to provide a neutral theme that would make it much easier for you to use our product without the trademarks by Deutsche Bahn.
Contributions are very welcome, please refer to the contribution guide.
We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone – have a look at our Contributor Covenant Code of Conduct.
This project is licensed under Apache-2.0.
FAQs
Angular components @db-ui/components
We found that @db-ui/ngx-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.