
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
cordova-plugin-injectview
Advanced tools
Automatically inject Cordova platform and plugin scripts into your site.
Automatically inject Cordova platform and plugin scripts into your site.
This plugin supports Android and iOS.
cordova plugin add cordova-plugin-injectview
Adding the plugin to your project is sufficient.
At runtime, when a page loads in the Cordova-hosted web view, this plugin injects Cordova's platform scripts as well as all of your plugin scripts into the web view. By doing this, you can integrate Cordova with a remotely hosted site without needing to explicitly include Cordova script tags or do request rewrites to load your Cordova plugin scripts.
This plugin registers a number of Cordova hooks
in plugin.xml that execute update-manifest.js.
This script parses each of your project configurations located at platforms/{platform}/{platform}.json
and generates a manifest file, cordova-plugin-injectview.json
, that contains relative paths to Cordova's
platform scripts as well as your plugin scripts. This manifest file gets compiled into your app as a resource.
At runtime, this plugin hooks into the web view's page load event: onPageFinished
for Android,
CDVPageDidLoadNotification
for iOS. Once the event fires, this plugin parses the manifest to determine
all script paths, reads each script, concatenates everything into one large script, then evaluates the
whole thing using the web view's JavaScript engine.
Copyright © 2015 Fabian Strachanski
Copyright © 2016 Sam Beran
Copyright © 2020 Chris Schmich
MIT License. See LICENSE for details.
FAQs
Automatically inject Cordova platform and plugin scripts into your site.
The npm package cordova-plugin-injectview receives a total of 198 weekly downloads. As such, cordova-plugin-injectview popularity was classified as not popular.
We found that cordova-plugin-injectview demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.