Security News
Opengrep Emerges as Open Source Alternative Amid Semgrep Licensing Controversy
Opengrep forks Semgrep to preserve open source SAST in response to controversial licensing changes.
dsc-header-footer
Advanced tools
This repository holds the sources to provide the DSC Header/Footer, as well as the Helmet for consumption on 3rd party sites.
This repository holds the sources to provide the DSC Header/Footer, as well as the Helmet for consumption on 3rd party sites.
We use Rollup for providing a bundled version of Header/Footer and respective the Helmet. To provide these builds two scripts are defined in package.json
.
yarn build:headerfooter
yarn build:helmet
Both commands can also be executed in an chained way using yarn build
.
On build the relevant components for header/footer/helmet will be extracted out of the @salesforcedevs/dx-components
package and then bundled as single JavaScript components.
The output for Header/Footer will be stored in /public/header-footer
, and the output for the Helmet in /public/helmet
.
For sites that use a REST based set up (Component Library and Metadata Coverage Report) relevant configuration files will be created under public/config
.
The helmet is consumed by apps like www.heroku.com, which has a staging app at www-staging.heroku.com (has basic auth: leave user empty, password is "ronin"). Those apps have a HELMET_HOST
config var that can be pointed to your review app, making www-staging fetch the helmet from your PR:
heroku config-set HELMET_HOST=https://your-review-app-name.herokuapp.com -a www-staging
Remember to roll back www-staging after the QA process:
heroku rollback -a www-staging
https://developer.salesforce.com/shared-components
URL (e.g: https://developer.salesforce.com/shared-components/helmet/import.js
).shared-components
proxying to a Heroku app (e.g: Fastly fetches https://developer.salesforce.com/shared-components/helmet/import.js
from https://dsc-header-server-p.herokuapp.com/helmet/import.js
)static.json
file that sets HTTP headers for caching and CORS.The folder scripts/src/templates contains two example HTML files that showcase how to integrate the JavaScript files, and the custom elements.
FAQs
This repository holds the sources to provide the DSC Header/Footer, as well as the Helmet for consumption on 3rd party sites.
The npm package dsc-header-footer receives a total of 5 weekly downloads. As such, dsc-header-footer popularity was classified as not popular.
We found that dsc-header-footer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Opengrep forks Semgrep to preserve open source SAST in response to controversial licensing changes.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.