
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
body-scroll-freezer
Advanced tools
Dependency-free JS module to freeze body scroll when opening modal box
Dependency-free JS module to freeze body scroll when opening modal box.
Useful for modal, sliding-panel and lightbox interfaces.
<1kb minified.
Many other alternatives to this module listen to both mousewheel
and DOMMouseScroll
events in order to get some information from the DOM, which usually includes: Element.scrollTop
, event.deltaY
, Element.scrollHeight
or Element.clientHeight
. Check this StackOverflow answer as an example.
The problem is that most of those DOM operations (.scrollTop
and .scrollHeight
, for example) are expensive because they force layout/reflow. For more info on scrolling performance check out this article.
So, to avoid all that, body-scroll-freezer just assigns overflow: hidden;
and padding-right: [scrollWidth]px;
to the <body>
.
The overflow
avoids vertical move on the background when users are scrolling within the modal box. The padding-right
prevents horizontal jumps when hiding/showing the scrollbar.
// If no AMD/CommonJS: window.bodyScrollFreezer;
var bodyScroll = require('body-scroll-freezer');
1. Init to calculate scroll bar width.
// Note: declaring variable to store init() return is optional.
var scrollWidth = bodyScroll.init();
2. Turn scroll freeze ON when closing modal. Example:
document.querySelector('.modal-open').addEventListener('click', function() {
// Logic to show modal goes here
bodyScroll.freeze();
}, false);
3. Turn scroll freeze OFF when closing modal. Example:
document.querySelector('.modal-close').addEventListener('click', function() {
// Logic to hide modal goes here
bodyScroll.unfreeze();
}, false);
FAQs
Dependency-free JS module to freeze body scroll when opening modal box
The npm package body-scroll-freezer receives a total of 85 weekly downloads. As such, body-scroll-freezer popularity was classified as not popular.
We found that body-scroll-freezer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.