Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
hexo-codepen-snippet
Advanced tools
基本使用
在md文件中插入代码
{% codepen [配置名1]:[值1] [配置名2]:[值2] %}
// eg
{% codepen slug_hash:xxxx theme_id:js %}
配置名 | 值 |
---|---|
src_prefix | 具体见codepen |
slug_hash | 具体见codepen |
default_tab | 具体见codepen |
theme_id | 具体见codepen |
style | html内联css样式 |
scrolling | 见iframe标签属性 |
frameborder | 见iframe标签属性 |
loading | 见iframe标签属性 |
allowtransparency | 见iframe标签属性 |
allowfullscreen | 见iframe标签属性 |
优先级:引用配置 > hexo博客全局配置 > 插件内部默认配置
高优先级的配置会覆盖掉底优先级的配置
在md文件中插入代码中配置
{% codepen [配置名1]:[值1] [配置名2]:[值2] %}
在博客_config.yml文件中配置
# codepen
codepen:
src_prefix: 'https://codepen.io/misakisaysyes/embed'
default_tab: js
theme_id: light
这是根据作者使用习惯内置在插件中的配置
具体配置情况如下:
// 内置默认配置
const default_config = {
style: 'height: 256px; width: 100%;',
scrolling: 'no',
frameborder: 'no',
loading: 'lazy',
allowtransparency: 'true',
allowfullscreen: 'true'
}
FAQs
### 使用
The npm package hexo-codepen-snippet receives a total of 1 weekly downloads. As such, hexo-codepen-snippet popularity was classified as not popular.
We found that hexo-codepen-snippet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.