
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
Simple html templates with es6 quasi literals. You can also minify the templates using babel-plugin-as-html.
Inspired by http://www.2ality.com/2015/01/template-strings-html.html.
$ npm install as-html
// commonjs
var html = require('as-html')
// es6
import html from 'as-html'
// examples
let planet = 'world'
html`
<div>Hello ${planet}</div>
` //-> '<div>Hello world</div>'
// safe by default
planet = 'crazy<planet>'
html`
<div>Hello ${planet}</div>
` //-> '<div>Hello crazy<planet></div>'
// or insert html by prefixing with a bang!
html`
<div>Hello !${planet}</div>
` //-> '<div>Hello crazy<planet></div>'
// arrays are supported as well (automatically unescaped)!
let planets = ['a', 'b', 'c']
html`
<div>
${planets.map(planet => html`
<b>${planet}</b>
`)}
</div>
` //-> '<div><b>a</b><b>b</b><b>c</b></div>'
npm test to run tests.Please feel free to create a PR!
FAQs
HTML templating with es6 quasi literals.
The npm package as-html receives a total of 0 weekly downloads. As such, as-html popularity was classified as not popular.
We found that as-html demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.