
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@depay/react-shadow-dom
Advanced tools
A library to easily render react compatible shadow DOMs for web components with individual styling for inside and outside.
yarn add @depay/react-shadow-dom
import { ReactShadowDOM } from '@depay/react-shadow-dom';
ReactShadowDOM({
document,
element,
content,
outsideStyle: outsideStyle,
insideStyle: insideStyle
})
The function ReactShadowDOM
renders a react compontent (content
) into an insideContainer
that lives inside a shadowRoot of the outsideContainer
target element (element
) within a given document (document
) while also applying insideStyle
to the insideContainer
and outsideStyle
to the outsideContainer
.
You can either pas a ReactElement to content
or a function. In case of a function
that function will be call with the insideContainer
as an argument and it's expected to return a ReactElement.
While outsideStyle
is applied to the outside container directly:
outsideStyle: `
border: 1px solid red;
color: black;
`
<div class="ReactShadowDOMOutsideContainer" style="border: 1px solid red;color: black;"></div>
insideStyle
is wrapped in a style tag and prepend to the shadowRoot:
insideStyle: `
.ReactShadowDOMInsideContainer {
background: blue;
color: white;
}
`
#shadow-root
<style type="text/css">.ReactShadowDOMInsideContainer {background: blue;color: white;}</style>
<div class="ReactShadowDOMInsideContainer"><h1>I'm in a ShadowDOM</h1></div>
wich allows you to style all elements and classes within the shadowRoot.
insideClasses
sets classes on inside container:
insideClasses: ['contained', 'another-class']
#shadow-root
<div class="ReactShadowDOMInsideContainer contained another-class"><h1>I'm in a ShadowDOM</h1></div>
In order to completly unmount everything (removing containers and unmounting React components),
the ReactShadowDOM
function returns an object containing an unmount
function:
let { unmount } = ReactShadowDOM(...)
unmount()
yarn install
yarn demo
yarn test:integration
yarn test:cypress:debug 'cypress/integration/ReactShadowDOM.js'
npm publish
FAQs
A library to easily render react compatible shadow DOMs for web components with individual styling for inside and outside.
We found that @depay/react-shadow-dom demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.