
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@klarna/remote-frames
Advanced tools
Render a subset of the React tree to a different location, from many locations, without having to coordinate them
Render a subset of the React tree to a different location, from many locations, without having to coordinate them.
Say that you have an HTML with two DOM nodes that you want to render to:
<!doctype html>
<html>
<head>
<title>Remote frame</title>
</head>
<body>
<div id="dialogs-node"></div>
<div id="main-content-node"></div>
</body>
</html>
…and for some reason, you want elements in the React tree rendered under the "main-content-node" to be able to inject elements into the "dialogs-node". The RemoteFrame allows you to send this elements to the remote tree (the one under "dialogs-node").
import React, { Component } from 'react'
import { RemoteFrame, RemoteFramesProvider } from '@klarna/remote-frames'
const Dialog1 = () => <article>
<h2>Lorem ipsum</h2>
</article>
const Dialog2 = () => <section>
<h3>Dolor sit amet</h3>
</section>
class App extends Component {
constructor() {
super()
this.state = {
showDialog1: false,
showDialog2: false,
}
}
render() {
const { showDialog1, showDialog2 } = this.state
return <RemoteFramesProvider
targetDomElement={Promise.resolve(
document.getElementById('dialogs-node')
)}
onFrameAdded={frameJSX => {
console.log(
'a new frame was added to the dialogs-node stack',
frameJSX
)
}}
onFrameRemoved={frameJSX => {
console.log(
'a frame was removed from the dialogs-node stack',
frameJSX
)
}}
onNoFrames={lastJSXRemoved => {
console.log(
'all frames have been removed from the stack',
lastJSXRemoved
)
}}>
<div>
<h1>App that demonstrates remote-frames</h1>
<button
onClick={() => this.setState({
showDialog1: !showDialog1
})}>
{showDialog1 ? 'Hide Dialog 1' : 'Show Dialog 1'}
</button>
<button
onClick={() => this.setState({
showDialog2: !showDialog1
})}>
{showDialog2 ? 'Hide Dialog 2' : 'Show Dialog 2'}
</button>
{showDialog1 && <RemoteFrame>
<Dialog1 />
</RemoteFrame>}
{showDialog2 && <RemoteFrame>
<Dialog2 />
</RemoteFrame>}
</div>
</RemoteFramesProvider>
}
}
render(
<App />,
document.getElementById('main-content-node')
)
Whenever you click the "Show" / "Hide" buttons, the dialogs are sent to a React tree under the "dialogs-node", and rendered one at a time. If there was no dialog being shown at the time, then the new dialog is added; if there was a dialog shown already, the new dialog is shown instead, but then if the new dialog is removed, the old dialog is shown again, as in a sort of stack.
State of the elements inside the RemoteFrame is preserved, even when unmounted.
If there is no RemoteFramesProvider in the tree before the RemoteFrame, the content of RemoteFrame will just be rendered in place.
For the React.context to be propagated to the new tree, you have to manually specify what props of the context you want to propagate:
import React, { Component } from 'react'
import PropTypes from 'prop-types'
import { getContext, withContext } from 'recompose'
import {
RemoteFrame,
RemoteFramesProvider
} from '@klarna/remote-frames'
const Dialog1 = getContext({ content1: PropTypes.string })(({content1}) => <article>
<h2>{content1}</h2>
</article>)
const Dialog2 = getContext({ content2: PropTypes.string })(({content2}) => <section>
<h3>{content2}</h3>
</section>)
const App = withContext(
{
content1: PropTypes.string,
content2: PropTypes.string,
},
() => ({
content1: 'Hello Dialog 1',
content2: 'Hello Dialog 2',
})
)(() => {
return <RemoteFramesProvider
contextTypes={{
content1: PropTypes.string,
}}
targetDomElement={Promise.resolve(
document.getElementById('dialogs-node')
)}>
<div>
<h1>App that demonstrates remote-frames</h1>
<button
onClick={() => this.setState({
showDialog1: !showDialog1
})}>
{showDialog1 ? 'Hide Dialog 1' : 'Show Dialog 1'}
</button>
<button
onClick={() => this.setState({
showDialog2: !showDialog1
})}>
{showDialog2 ? 'Hide Dialog 2' : 'Show Dialog 2'}
</button>
<RemoteFrame>
<Dialog1 />
</RemoteFrame>
<RemoteFrame
contextTypes={{
content2: PropTypes.string,
}}>
<Dialog2 />
</RemoteFrame>
</div>
</RemoteFramesProvider>
})
render(
<App />,
document.getElementById('main-content-node')
)
RemoteFramesProviderTwo callbacks are available on RemoteFramesProvider:
onFrameAdded: gets called whenever another frame is added to the stackonNoFrames: gets called whenever all frames are removed from the stackonFrameRemoved: gets called whenever a frame is removed from the stacktargetDomElementThe targetDomElement used to render the new React tree can be passed directly to the RemoteFramesProvider as a prop, or it can be passed as a Promise, allowing you to wait until the targetDomElement is available (for example if it is rendered in another window).
Frames stacked before the targetDomElement is available will be queued, so you will not lose any information.
wrapperComponentThe wrapperComponent (alongside with wrapperComponentProps) used to wrap GlobalTarget into HOC (for example if it is needed to wrap everything into ThemeProvider, etc.).
<RemoteFramesProvider
targetDomElement={document.getElementById('dialogs-node')}
wrapperComponent={ThemeProvider}
wrapperComponentProps={{ value: themeName }}>
FAQs
Render a subset of the React tree to a different location, from many locations, without having to coordinate them
We found that @klarna/remote-frames demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.