
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
@squarespace/mercury
Advanced tools
A configurable, asynchronous, plug-and-play loader for your website. Intercepts clicks on <a>
elements and performs an XHR to that href, and updates the DOM according to a config object you pass in.
NOTICE: This code is licensed to you pursuant to Squarespace’s Developer Terms of Use. See license section below.
npm install --save @squarespace/mercury;
const Mercury = require('@squarespace/mercury');
const instance = new Mercury({
updateMatrix: [
{ selector: 'title', updateHTML: true },
{ selector: 'body', updateAttrs: true },
{ selector: '.content', updateHTML: true },
{ selector: 'script[data-name="static-context"]', updateScript: true }
]
});
If you prefer to handle transpiling and polyfilling on your own, you can import ES6 from Mercury:
import Mercury from '@squarespace/mercury/src';
Alternately, Mercury specifies a module
property in package.json
that points to the uncompiled src/index.js
, so you may be able to simply import @squarespace/mercury
if you're using one of the following bundlers:
Params
Object
- Config objectArray
- Array of selectors to update (required)Boolean
- Save markup in a cache objectArray
- Array of selectors to exclude from AJAX requestsArray
- Array of selectors to exclude from AJAX requestsFunction
- Function to run after the AJAX requestFunction
- Function to run before the AJAX requestNumber
- Timeout in milliseconds for AJAX requestUnbind all event listeners, including click, popstate, load, and unload.
Public method for the user of this class to pass in some HTML to commit to the class's cache. When the updateDOM call occurs, the method will check the cache first to see if there's a match for that URL with that selector, and use the cached HTML if there is.
The primary use case for this method is situations where other content is loaded asynchronously, and the user wishes for Mercury to use that content rather than whatever is on the server. Consider – infinite scrolling blogs may call commitCacheEntry each time a new load occurs.
Params
String
- Current URL for committed cache entryString
- Current selector for committed cache entryPortions Copyright © 2016 Squarespace, Inc. This code is licensed to you pursuant to Squarespace’s Developer Terms of Use, available at http://developers.squarespace.com/developer-terms-of-use (the “Developer Terms”). You may only use this code on websites hosted by Squarespace, and in compliance with the Developer Terms. TO THE FULLEST EXTENT PERMITTED BY LAW, SQUARESPACE PROVIDES ITS CODE TO YOU ON AN “AS IS” BASIS WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED.
FAQs
Simple, site-wide ajax loading
The npm package @squarespace/mercury receives a total of 6 weekly downloads. As such, @squarespace/mercury popularity was classified as not popular.
We found that @squarespace/mercury demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.