
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@financial-times/dotcom-middleware-navigation
Advanced tools
This package provides an [Express] compatible middleware which integrates the [FT Navigation] package into your application and adds the navigation data, including editions data, to each response making it available to your application's route handlers. T
This package provides an Express compatible middleware which integrates the FT Navigation package into your application and adds the navigation data, including editions data, to each response making it available to your application's route handlers. This data is required to render the navigation components header and footer.
This package is compatible with Node 12+ and is distributed on npm.
npm install --save @financial-times/dotcom-middleware-navigation
After installing the package create a new instance of the middleware and register it with your application. The middleware can be configured with several options:
const express = require('express')
const app = express()
+ const navigation = require('@financial-times/dotcom-middleware-navigation')
+ app.use(navigation.init())
Once registered, a navigation
property will be added to the response locals object containing the navigation data.
app.get('/', (request, response) => {
console.log(response.locals.navigation) // { ... }
})
The middleware accepts the following parameters. All options will be passed along to the FT Navigation package:
enableSubNavigation
Enables fetching hierarchical navigation data for the current path including any parent and child pages. Defaults to false
.
getCurrentPath
Enables overriding of the default current path logic. Defaults to:
(request) => normalizePath(request.get('ft-vanity-url') || request.path)
interval
See the FT navigation documentation for more details.
subNavigationUrl
See the FT navigation documentation for more details.
menuUrl
See the FT navigation documentation for more details.
FAQs
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.