
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
Lightweight web framework for node.js
General usage
var Crixalis = require('crixalis');
Crixalis
/* Load plugins */
.plugin('shortcuts')
.plugin('access', { format: '%7T %-4m %s %9B %-15h %U%q' })
/* Add route with placeholder */
.get('/hello/:name', function () {
/* Prepare data for response */
this.stash.json = {
message: 'Hello, ' + this.params.name + '!'
};
/* Render response */
this.render();
})
/* Add another route for GET and HEAD methods */
.route('/info', { methods: ['GET', 'HEAD'] }, function () {
var that = this;
require('fs').readFile('./readme.md', function (error, result) {
if (error) {
/* Handle error */
that.error(error);
} else {
that.body = result;
that.render();
}
});
})
/* Catch everything else */
.route('*', function () {
this.redirect('/hello/World');
})
/* Start server on port 8080 */
.start('http', 8080);
Available core plugins
access
Access log (with configurable CLF support)compression
Compress response using gzip
or deflate
compression (also works with static
plugin)request
Thin wrapper around http.request
and https.request
shortcuts
Route declaration helpers, .get()
, .post()
, etc.static
Serve static filesCrixalis comes with script for serving static files
# Start web server on port `8080` and serve files from current folder
crixalis
# Start web server on port `3000` and serve files from `~/www/`
crixalis --port 3000 --path ~/www/
Copyright 2012-2016 Alexander Nazarov. All rights reserved.
This program is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
FAQs
Lightweight web framework
We found that crixalis demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.