
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
find-duplicate-strings
Advanced tools
Easy to use CLI that finds duplicate strings in a directory and stores them in a external file for easy reference
Easy to use CLI that finds duplicate strings in a directory or file and stores the results in an external file for easy reference
Note that this does not find matches in files like grep does, instead it searches for (double/single) quoted characters. In other words, this tool can be used by development teams that want to know if there's any duplicate string values in their project and if so, where these can be found.
Install:
npm i -g find-duplicate-strings
Run:
find-duplicate-strings './**/*.js'
The result of the scan will be stored in file called fds-output.json or fds-output-.json if it already exists.
Breakdown of flags:
--ignore
ignore files and directories that match--treshold
only output strings that are duplicated for at least this number of times--output
this allows you to change the default filename for the output--interactive
runs the program in interactive mode modeBreakdown of arguments:
'./example/path/**/*.{js,ts}'
this is the path to scan (glob pattern)Use the help flag to get more information about how to use the CLI.
find-duplicate-strings --help
MIT
FAQs
Easy to use CLI that finds duplicate strings in a directory and stores them in a external file for easy reference
The npm package find-duplicate-strings receives a total of 10 weekly downloads. As such, find-duplicate-strings popularity was classified as not popular.
We found that find-duplicate-strings demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.