Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
angular-ui-sortable
Advanced tools
This directive allows you to sort an array with drag & drop.
Single minified cdn link ~245kB and example with JQuery v1.x, required parts of JQueryUI v1.10, AngularJS v1.2 & latest angular-ui-sortable.
Notes:
- JQuery must be included before AngularJS.
- JQueryUI dependecies include widget, data, scroll-parent, mouse & sortable. Creating a custom build will greatly reduce the required file size. (CDN links for comparison: full vs minimal)
- Users of AngularJS pre v1.2 can use v0.10.x or v0.12.x branches.
- Early adopters of Angular2 can use the ng2 branch.
bower install -S angular-ui-sortable
npm install -S angular-ui-sortable
Load the script file: sortable.js in your application:
<script type="text/javascript" src="modules/directives/sortable/src/sortable.js"></script>
Add the sortable module as a dependency to your application module:
var myAppModule = angular.module('MyApp', ['ui.sortable'])
Apply the directive to your form elements:
<ul ui-sortable ng-model="items">
<li ng-repeat="item in items">{{ item }}</li>
</ul>
Developing Notes:
ng-model
is required, so that the directive knows which model to update.ui-sortable
element should contain only one ng-repeat
, but other non-repeater elements above or below may still exist.
Otherwise the index matching of the ng-model
's items and the DOM elements generated by the ng-repeat
will break.ng-model
must match the indexes of the DOM elements generated by the ng-repeat
.Filters
that manipulate the model (like filter, orderBy, limitTo,...) should be applied in the controller
instead of the ng-repeat
(refer to the provided examples).ng-model
's itemsui-sortable
lists containing many 'types' of items can be implemented by using dynamic template loading with ng-include or a loader directive, to determine how each model item should be rendered. Also take a look at the Tree with dynamic template example.All the jQueryUI Sortable options can be passed through the directive.
Additionally, the ui
argument of the available callbacks gets enriched with some extra properties as specified to the API.md file.
Any model changes that happen inside the available callbacks, are applied right after the stop event. We are not wrapping callbacks like start
/change
/... with $apply
, in order to minimize the number of digest loops and avoid possible modifications of the model (eg: by watchers) before the drop takes place.
myAppModule.controller('MyController', function($scope) {
$scope.items = ["One", "Two", "Three"];
$scope.sortableOptions = {
update: function(e, ui) { ... },
axis: 'x'
};
});
<ul ui-sortable="sortableOptions" ng-model="items">
<li ng-repeat="item in items">{{ item }}</li>
</ul>
When using event callbacks (start/update/stop...), avoid manipulating DOM elements (especially the one with the ng-repeat attached). The suggested pattern is to use callbacks for emmiting events and altering the scope (inside the 'Angular world').
ui-floating (default: undefined)
Description: Enables a workaround for smooth horizontal sorting.
Type: Boolean/String/undefined
start
if the element is floating or not.To have a smooth horizontal-list reordering, jquery.ui.sortable needs to detect the orientation of the list. This detection takes place during the initialization of the plugin (and some of the checks include: whether the first item is floating left/right or if 'axis' parameter is 'x', etc). There is also a known issue about initially empty horizontal lists.
To provide a solution/workaround (till jquery.ui.sortable.refresh() also tests the orientation or a more appropriate method is provided), ui-sortable directive provides a ui-floating
option as an extra to the jquery.ui.sortable options.
<ul ui-sortable="{ 'ui-floating': true }" ng-model="items">
<li ng-repeat="item in items">{{ item }}</li>
</ul>
OR
$scope.sortableOptions = {
'ui-floating': true
};
<ul ui-sortable="sortableOptions" ng-model="items">
<li ng-repeat="item in items">{{ item }}</li>
</ul>
ui-model-items (default: > [ng-repeat],> [data-ng-repeat],> [x-ng-repeat]
)
Description: Defines which elements should be considered as part of your model.
Type: CSS selector/String
This is the model related counterpart option of jQuery's items option.
ui-preserve-size (default: undefined)
Description: Set's the size of the sorting helper to the size of the original element before the sorting.
Type: Boolean/undefined
This is useful for elements that their size is dependent to other page characteristics.
A representative example of such cases are <table>
<tr>
s and <td>
s.
To handle events with html bindings just define any expression to listed event attributes. If you defined an attribute for this events and defined callback function in sortableOptions at the same time, the attribute based callback will be called first.
Expression works on update event.
<ul ui-sortable ng-model="items" ui-sortable-update="expression" >
<li ng-repeat="item in items">{{ item }}</li>
</ul>
On update event callBackFunction1 if called before callBackFunction2.
$scope.sortableOptions = {
'update': callBackFunction2
};
<ul ui-sortable="sortableOptions" ng-model="items" ui-sortable-update="callBackFunction1" >
<li ng-repeat="item in items">{{ item }}</li>
</ul>
Inside the update
callback, you can check the item that is dragged and cancel the sorting.
$scope.sortableOptions = {
update: function(e, ui) {
if (ui.item.sortable.model == "can't be moved") {
ui.item.sortable.cancel();
}
}
};
Notes:
update
is the appropriate place to cancel a sorting, since it occurs before any model/scope changes but after the DOM position has been updated.
So ui.item.scope
and the directive's ng-model
, are equal to the scope before the drag start.cancel
should be called inside the update
callback of the originating list. A simple way to is to use the ui.item.sortable.received
property:update: function(event, ui) {
if (// ensure we are in the first update() callback
!ui.item.sortable.received &&
// check that its an actual moving between the two lists
ui.item.sortable.source[0] !== ui.item.sortable.droptarget[0] &&
// check the size limitation
ui.item.sortable.model == "can't be moved between lists") {
ui.item.sortable.cancel();
}
}
Single sortable demo
create
/* dragging starts */
helper
start
activate
/* multiple: sort/change/over/out */
beforeStop
update <= call cancel() here if needed
deactivate
stop
Connected sortables demo
list A: create
list B: create
/* dragging starts from sortable A to B */
list A: helper
list A: start
list B: activate
list A: activate
/* both lists multiple: sort/change/over/out */
list A: sort
list A: change
list B: change
list B: over
list A: sort
list B: out
list A: sort
list A: beforeStop
list A: update <= call cancel() here if needed
list A: remove
list B: receive
list B: update
list B: deactivate
list A: deactivate
list A: stop
For more details about the events check the jQueryUI API documentation.
Wrap the transclusion directive element with the ui-sortable directive and set the items
to target your ng-repeat
ed elements. Following best practices, it is also highly recommended that you add a track by
expression to your ng-repeat
. Angular Material example.
myAppModule.controller('MyController', function($scope) {
$scope.items = ["One", "Two", "Three"];
$scope.sortableOptions = {
items: '.sortable-item'
// It is suggested to use the most specific cssselector you can,
// after analyzing the DOM elements generated by the transclusion directive
// eg: items: '> .transclusionLvl1 > .transclusionLvl2 > .sortable-item'
};
});
<div ui-sortable="sortableOptions" ng-model="items">
<a-transclusion-directive>
<div ng-repeat="item in items" class="sortable-item">{{ item }}</div>
</a-transclusion-directive>
</div>
The above pen's are provided as a good starting point to demonstrate issues, proposals and use cases. Feel free to edit any of them for your needs (don't forget to also update the libraries used to your version).
We use Karma and jshint to ensure the quality of the code. The easiest way to run these checks is to use grunt:
npm install -g grunt-cli
npm install && bower install
grunt
The karma task will try to open Firefox and Chrome as browser in which to run the tests. Make sure this is available or change the configuration in test\karma.conf.js
.
We have one task to serve them all!
grunt serve
It's equal to run separately:
grunt connect:server
: giving you a development server at http://127.0.0.1:8000/.
grunt karma:server
: giving you a Karma server to run tests (at http://localhost:9876/ by default). You can force a test on this server with grunt karma:unit:run
.
grunt watch
: will automatically test your code and build your demo. You can demo generation with grunt build:gh-pages
.
FAQs
This directive allows you to jQueryUI Sortable.
The npm package angular-ui-sortable receives a total of 29,397 weekly downloads. As such, angular-ui-sortable popularity was classified as popular.
We found that angular-ui-sortable demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.