
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
ember-inert-polyfill
Advanced tools
Ember addon that provides the inert-polyfill to consuming applications
An Ember addon that enables use of the HTML inert attribute by importing
the inert polyfill.
The inert attribute is current a draft feature of HTML5,
but the Google Chrome team created a small polyfill for it in the meantime which
prevents tab-focusing, using the accessKey to access an element, the click event and
any other approach to focus.
The official HTML spec provides a good description of its use:
A node (in particular elements and text nodes) can be marked as inert. When a node is inert, then the user agent must act as if the node was absent for the purposes of targeting user interaction events, may ignore the node for the purposes of text search user interfaces (commonly known as "find in page"), and may prevent the user from selecting text in that node.
A primary example of where this might be extremely usefull is a collapsable side-navigation panel.
When the panel is off-screen, adding the inert attribute to it can
prevent links in the panel from becoming tabbable, thus preventing the jarring user
experience of browser focus vanishing into thin air. (Of course, you should then
remove the attribute when panel is animated on-screen.)
ember install ember-inert-polyfill
No setup or special configuration is needed: you can now use the inert attribute on any HTML element.
This project will intend to stay up to date with offering the latest version of the polyfill. If you notice a discrepency, please feel free to open up an issue.
git clone this repositorynpm installbower installember servenpm test (Runs ember try:testall to test your addon against multiple Ember versions)ember testember test --serverember buildFor more information on using ember-cli, visit http://ember-cli.com/.
FAQs
Ember addon that provides the inert-polyfill to consuming applications
We found that ember-inert-polyfill demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.