
Research
Using Trusted Protocols Against You: Gmail as a C2 Mechanism
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
======= gennyFlow is a client-side javascript tool that downloads HTML elements as images.
Practically speaking, when used with Webflow, you can create powerful automated image generation tools using your Webflow data, and no code, just attributes!
While this was made to be used with Webflow and its CMS, it is compatible with any js-enabled web environment.
You can see a live example at gennyFlow.byBrian.io.
document.addEventListener("DOMContentLoaded", () => {
document.querySelector("[gf=trigger]")?.addEventListener("click", () => {
const options = { /* your options here */ };
gennyFlow(options);
});
});
Below this is
gennyFlow
elements are controlled using custom attributes, which you'll be familiar with if you've used Finsweet Attributes.
gf="wrapper"
gf="capture"
gf="slug" (ok this isn't really required)
gf="trigger"
gennyFlow
, downloading all capture elements.There are many ways to set these options, and you can use them in any combination, as long as you understand the order of precedence.
Order of precedence
Capture element Example: An element has both "gf=capture" and "gf-scale=2" The item would export with a scale of 2 no matter what higher-level settings were set.
Note: only on capture elements, you can specify multiple scales separated by commas. Example: This would export this element 3 times: @1x @2x @3x
<div gf="capture" gf-scale="1,2,3">
User input Example: An html input with attribute "gf=scale-input"
<input gf="scale-input" value="2">
Wrapper Example: The wrapper element with gf="wrapper" also has "gf-scale=2" This scale is applied to all captures inside of the wrapper unless overruled by 1 or 2.
Defaults
Attribute (and defaults) | Accepted values | User inputs | |
---|---|---|---|
File Format | gf-format="png" | 'jpg' 'png' 'webp' | gf="format-input" |
Quality (jpg/webp) | gf-quality="1" | 0.0 to 1.0 | gf="quality-input" |
Scale | gf-scale="1" | any number | gf="scale-input" |
Zip Folder Name | gf-zip-name="images" | 'any string' | gf="zip-name-input" |
Include Date, Zip Name | gf-include-date-zip="false" | true false | |
Include Scale, Zip Name | gf-include-scale-zip="false" | true false | |
Include Date, Img Name | gf-include-date-img="false" | true false | |
Include Scale, Img Name | gf-include-scale-img="false" | true false | |
Disable SVG Fix | gf-disable-svg-fix="true" | true false | |
Don't capture element | gf="ignore" | "ignore" |
gennyFlow
also works outside of Webflow! Here is how it would look on a simple page.
<button type="button" gf="trigger">Download images</button>
<div gf="wrapper">
<div gf="capture">
<div gf="slug">Example image 1</div>
</div>
<div gf="capture">
<div gf="slug">Example image 2</div>
</div>
</div>
<script src="gennyflow.js"></script>
<script>
// gennyFlow by Brian Tucker
// {@link https://www.gennyflow.com}
document.addEventListener("DOMContentLoaded", () => {
document.querySelector("[gf=trigger]")?.addEventListener("click", () => {
const options = { /* your options here */ };
gennyFlow(options);
});
});
</script>
If your capture elements have externally hosted images or css inside them, you will likely hit a CORS error.
To bypass this, I recommend using a CORS proxy. You can find my fork of a Cloudflare Worker CORS proxy here.
FAQs
Easily download one or more DOM elements as images in Webflow
The npm package gennyflow receives a total of 15 weekly downloads. As such, gennyflow popularity was classified as not popular.
We found that gennyflow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.
Product
We redesigned Socket's first logged-in page to display rich and insightful visualizations about your repositories protected against supply chain threats.
Product
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.