Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@strapi/blocks-react-renderer
Advanced tools
Easily render the content of Strapi's new Blocks rich text editor in your React frontend.
Easily render the content of Strapi's new Blocks rich text editor in your React frontend.
Install the Blocks renderer and its peer dependencies:
yarn add @strapi/blocks-react-renderer react react-dom
npm install @strapi/blocks-react-renderer react react-dom
After fetching your Strapi content, you can use the BlocksRenderer component to render the data from a blocks attribute. Pass the array of blocks coming from your Strapi API to the content
prop:
import { BlocksRenderer, type BlocksContent } from '@strapi/blocks-react-renderer';
// Content should come from your Strapi API
const content: BlocksContent = [
{
type: 'paragraph',
children: [{ type: 'text', text: 'A simple paragraph' }],
},
];
const App = () => {
return <BlocksRenderer content={content} />;
};
You can provide your own React components to the renderer, both for blocks and modifier. They will be merged with the default components, so you can override only the ones you need.
level
)format
)plainText
)image
)url
)To provide your own components, pass an object to the blocks
and modifiers
props of the renderer. For each type, the value should be a React component that will receive the props of the block or modifier. Make sure to always render the children, so that the nested blocks and modifiers are rendered as well.
import { BlocksRenderer } from '@strapi/blocks-react-renderer';
// Content should come from your Strapi API
const content = [
{
type: 'paragraph',
children: [{ type: 'text', text: 'A simple paragraph' }],
},
];
const App = () => {
return (
<BlocksRenderer
content={content}
blocks={{
// You can use the default components to set class names...
paragraph: ({ children }) => <p className="text-neutral900 max-w-prose">{children}</p>,
// ...or point to a design system
heading: ({ children, level }) => {
switch (level) {
case 1:
return <Typography variant="h1">{children}</Typography>
case 2:
return <Typography variant="h2">{children}</Typography>
case 3:
return <Typography variant="h3">{children}</Typography>
case 4:
return <Typography variant="h4">{children}</Typography>
case 5:
return <Typography variant="h5">{children}</Typography>
case 6:
return <Typography variant="h6">{children}</Typography>
default:
return <Typography variant="h1">{children}</Typography>
}
},
// For links, you may want to use the component from your router or framework
link: ({ children, url }) => <Link to={url}>{children}</Link>,
}}
modifiers={{
bold: ({ children }) => <strong>{children}</strong>,
italic: ({ children }) => <span className="italic">{children}</span>,
}}
/>
);
};
FAQs
Easily render the content of Strapi's new Blocks rich text editor in your React frontend.
The npm package @strapi/blocks-react-renderer receives a total of 16,994 weekly downloads. As such, @strapi/blocks-react-renderer popularity was classified as popular.
We found that @strapi/blocks-react-renderer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.