
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
cross-tab-channel
Advanced tools
This is a simple library for sending data between browser tabs. It uses storage events for same domain use, and adds in postMessage with an iframe for cross domain messaging. There is also a [redux middleware](https://github.com/stutrek/cross-tab-middlewa
This is a simple library for sending data between browser tabs. It uses storage events for same domain use, and adds in postMessage with an iframe for cross domain messaging. There is also a redux middleware.
There are a few of these, but none were what I wanted.
To use this library you listen to changes to a channel. A channel is identified with a string.
import CrossTab from 'cross-tab-channel';
var channel = new CrossTab('my-channel-name');
channel.listen(function (message) {
console.log(message);
});
channel.emit({
my: 'data'
});
channel.remove(anyPreviouslyAppliedListener);
You may emit messages of any type, as long as they can be JSON encoded.
This is more tricky because the browser won't send storage events across domains. It needs to load an iframe hosted on your domain so the library can postMessages to and from it. Luckilly, that iframe has already been made and is entirely self contained.
import CrossDomain from 'cross-tab-channel/dist/CrossDomain';
// create the iframe that will serve as middleman between your domain and this one
// you can find iframe.html in the dist folder of this repo.
CrossDomain.createIframe('//your-domain.com/path/to/iframe.html');
// channel names are shared with normal, same domain, messaging.
var channel = new CrossDomain('my-channel-name');
channel.listen(function (message) {
console.log(message);
});
channel.emit({
my: 'data'
});
channel.remove(anyPreviouslyAppliedListener);
yarn start
will start the dev server. Visit http://localhost/test.html and http://127.0.0.1/crossDomain.html and open the console to see it in action.
Briefly tested on IE9 with surprisingly successful results.
FAQs
This is a simple library for sending data between browser tabs. It uses storage events for same domain use, and adds in postMessage with an iframe for cross domain messaging. There is also a [redux middleware](https://github.com/stutrek/cross-tab-middlewa
We found that cross-tab-channel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.