
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@gotitinc/mathlive
Advanced tools
MathLive is a powerful web component that provides an easy-to-use interface for editing math formulas.
With over 800 built-in LaTeX commands, MathLive renders beautiful, TeX-quality typesetting.
It's designed for mobile devices with an extensive set of virtual keyboards for math input, and is compatible with screen readers, including custom math-to-speech support for improved accessibility.
MathLive outputs to LaTeX, MathML, ASCIIMath, and MathJSON formats, making it incredibly versatile.
And the best part? It's easy to customize to your needs!
![]() |
![]() |
![]() |
Using MathLive is easy! Simply add a <math-field>
tag to your page. It
initializes automatically and works just like a <textarea>
or <button>
element. You can manipulate the mathfield using methods of the element and
listen for events to be notified when its internal state changes.
npm install mathlive
import 'mathlive';
<!DOCTYPE html>
<html lang="en-US">
<body>
<math-field>f(x)=</math-field>
</body>
</html>
You can also add it using CDN
<head>
<script src="https://unpkg.com/mathlive"></script>
</head>
Check documentation for React and interaction with Mathfield.
MathLive has an extensive set of documentation to help you get started, including guides on interacting with a mathfield, customizing it, executing commands, defining custom LaTeX macros, managing inline and keyboard shortcuts, controlling speech output, and displaying static math formulas. You can find all of these guides on the CortexJS.io website.
In addition to the guides, you can also find reference documentation of the MathLive API on the Mathfield API Reference page.
Q: When is the next release?
MathLive follows a semi-annual release cycle, with major releases typically scheduled for June and January. These may be followed by patch releases to address any issues that arise shortly after deployment. Additionally, an out-of-band release can be made if requested by a sponsor or if a community member submits a pull request and requests a release to include their contribution.
This project is licensed under the MIT License.
FAQs
A web component for math input
We found that @gotitinc/mathlive demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.