
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
audio-context-polyfill
Advanced tools
Just code for one API by enjoying this polyfill for the Web Audio API.
Just code for one API by enjoying this polyfill for the Web Audio API at W3, following the upgrade path outlined at MDN.
First, as the Web Audio API evolved, many method names were changed from what we find in older Chrome and Safari browsers (e.g. buffer.start() was bufferNode.noteOn()). Second, older browsers retained a vendor prefixed Audio Context method (e.g. window.AudioContext was window.webkitAudioContext).
Including this polyfill will improve your experience coding for Chrome 10-30, Firefox v23-25, Opera 15-16, Safari 6-7, iOS Safari 6-7, and potentially later versions of these browsers as well.
Let’s load a sound and autoplay it.
var
// create the audio context
context = new AudioContext(),
// create the http request
request = new XMLHttpRequest();
// request the MP3
request.open('GET', 'sound.mp3');
// request as an array buffer
request.responseType = 'arraybuffer';
// when the request loads
request.addEventListener('load', function () {
// decode the array buffer
context.decodeAudioData(request.response, function (buffer) {
var
// create the audio source
source = context.createBufferSource(),
// create the audio volume
volume = context.createGainNode();
// set the buffer to the audio source
source.buffer = buffer;
// set the volume to half
volume.gain.value = 0.5;
// connect the audio source to the audio volume
source.connect(volume);
// connect the audio volume to the output
volume.connect(context.destination);
// play the audio source
source.start(0);
});
});
// begin the request
request.send();
FAQs
Just code for one API by enjoying this polyfill for the Web Audio API.
The npm package audio-context-polyfill receives a total of 27,748 weekly downloads. As such, audio-context-polyfill popularity was classified as popular.
We found that audio-context-polyfill demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.