
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@sentry/babel-plugin-component-annotate
Advanced tools
A Babel plugin that annotates frontend components with additional data to enrich the experience in Sentry
A Babel plugin that automatically annotates your output DOM with their respective frontend component names.
This will unlock the capability to search for Replays in Sentry by component name, as well as see component names in breadcrumbs and performance monitoring.
Please note that your Sentry JavaScript SDK version must be at least 7.91.0
to take advantage of these features.
Currently, this plugin only works with React, and will exclusively parse .jsx
and .tsx
files.
This plugin comes included in Sentry's bundler plugins, alongside many other features to improve your Sentry workflow. It can be downloaded individually, but it is recommended that you install the bundler plugins for your respective bundler, and enable this feature through the config object.
Check out the supported bundler plugin packages for installation instructions:
Using npm:
npm install @sentry/babel-plugin-component-annotate --save-dev
Using yarn:
yarn add @sentry/babel-plugin-component-annotate --dev
Using pnpm:
pnpm add @sentry/babel-plugin-component-annotate --save-dev
ignoredComponents
Type: string[]
A list of strings representing the names of components to ignore. The plugin will not apply data-sentry
annotations on the DOM element for these components.
// babel.config.js
{
// ... other config above ...
plugins: [
// Put this plugin before any other plugins you have that transform JSX code
// The options are set by providing an object as the second element in the array, but not required
['@sentry/babel-plugin-component-annotate', {ignoredComponents: ['Foo', 'Bar']}]
],
}
Or alternatively, configure the plugin by directly importing it:
// babel.config.js
import componentNameAnnotatePlugin from '@sentry/babel-plugin-component-annotate';
{
// ... other config above ...
plugins: [
// Put this plugin before any other plugins you have that transform JSX code
[componentNameAnnotatePlugin]
],
}
4.0.2
moduleMetadata
injection snippet ES5-compliant (#774)FAQs
A Babel plugin that annotates frontend components with additional data to enrich the experience in Sentry
The npm package @sentry/babel-plugin-component-annotate receives a total of 3,241,563 weekly downloads. As such, @sentry/babel-plugin-component-annotate popularity was classified as popular.
We found that @sentry/babel-plugin-component-annotate demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.