
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@squarespace/mercury
Advanced tools
A configurable, asynchronous, plug-and-play loader for your website. Intercepts clicks on <a>
elements and performs an XHR to that href, and updates the DOM according to a config object you pass in.
NOTICE: This code is licensed to you pursuant to Squarespace’s Developer Terms of Use. See license section below.
npm install --save @squarespace/mercury;
const Mercury = require('@squarespace/mercury');
const instance = new Mercury({
updateMatrix: [
{ selector: 'title', updateHTML: true },
{ selector: 'body', updateAttrs: true },
{ selector: '.content', updateHTML: true },
{ selector: 'script[data-name="static-context"]', updateScript: true }
]
});
If you prefer to handle transpiling and polyfilling on your own, you can import ES6 from Mercury:
import Mercury from '@squarespace/mercury/src';
Alternately, Mercury specifies a module
property in package.json
that points to the uncompiled src/index.js
, so you may be able to simply import @squarespace/mercury
if you're using one of the following bundlers:
Params
Object
- Config objectArray
- Array of selectors to update (required)Boolean
- Save markup in a cache objectArray
- Array of selectors to exclude from AJAX requestsArray
- Array of selectors to exclude from AJAX requestsFunction
- Function to run after the AJAX requestFunction
- Function to run before the AJAX requestNumber
- Timeout in milliseconds for AJAX requestUnbind all event listeners, including click, popstate, load, and unload.
Public method for the user of this class to pass in some HTML to commit to the class's cache. When the updateDOM call occurs, the method will check the cache first to see if there's a match for that URL with that selector, and use the cached HTML if there is.
The primary use case for this method is situations where other content is loaded asynchronously, and the user wishes for Mercury to use that content rather than whatever is on the server. Consider – infinite scrolling blogs may call commitCacheEntry each time a new load occurs.
Params
String
- Current URL for committed cache entryString
- Current selector for committed cache entryPortions Copyright © 2016 Squarespace, Inc. This code is licensed to you pursuant to Squarespace’s Developer Terms of Use, available at http://developers.squarespace.com/developer-terms-of-use (the “Developer Terms”). You may only use this code on websites hosted by Squarespace, and in compliance with the Developer Terms. TO THE FULLEST EXTENT PERMITTED BY LAW, SQUARESPACE PROVIDES ITS CODE TO YOU ON AN “AS IS” BASIS WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED.
FAQs
Simple, site-wide ajax loading
We found that @squarespace/mercury demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.