Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
@instructure/canvas-rce
Advanced tools
WARNING: While our intent is to make the RCE avaiable outside of canvas-lms, it currently has dependencies on canvas that make that impossible. Please be patient.
The Canvas LMS Rich Content Editor extracted in it's own npm package for use
across multiple services. This npm module is used in pair with a running
canvas-rce-api
microservice.
You need a running instance of the canvas-rce-api
in order to utilize
the canvas-rce
npm module, but you do not need that instance in order to
do development on canvas-rce
. (see docs/development.md)
The first customer of the canvas-rce
was the canvas-lms
LMS so documentation
and references throughout documentation might reflect and assume the use of
canvas-lms
.
As a published npm module, you can add canvas-rce to your node project by doing the following:
npm install canvas-rce --save
Please reference the canvas-lms use of canvas-rce
to get an idea on how to incorporate it into your project. Pay
special attention to the RichContentEditor.js
and serviceRCELoader.js
.
Jest tests are run against the .cjs version of the source, so make sure you've built the .cjs assets before running tests:
npm run build:canvas
npm run test:jest
This project makes use of modern JavaScript APIs like Promise, Object.assign, Array.prototype.includes, etc. which are present in modern browsers but may not be present in old browsers like IE 11. In order to not send unnecessarily large and duplicated code bundles to the browser, consumers are expected to have already globally polyfilled those APIs. Canvas already does this but if you need suggestions for how to this in your own app, you can just put this in your html above the script that includes canvas-rce:
<script src="https://cdn.polyfill.io/v2/polyfill.min.js?rum=0"></script>
(See: https://polyfill.io/v2/docs/ for more info)
See DEVELOPMENT.md
FAQs
A component wrapping Canvas's usage of Tinymce
The npm package @instructure/canvas-rce receives a total of 989 weekly downloads. As such, @instructure/canvas-rce popularity was classified as not popular.
We found that @instructure/canvas-rce demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.