Security News
Django Joins curl in Pushing Back on AI Slop Security Reports
Django has updated its security policies to reject AI-generated vulnerability reports that include fabricated or unverifiable content.
By Sarah Gooding - Jun 30, 2025
🚀 Big News: Socket Acquires Coana to Bring Reachability Analysis to Every Appsec Team.Learn more →
inject-lr-script
Advanced tools
inject-lr-script
Inject the LiveReload script snippet into a HTML response.
This detects .htm and .html and ensures they have text/html accept headers, if not yet set.
Example:
var liveReload = require('inject-lr-script')
var stacked = require('stacked')
var http = require('http')
var serveStatic = require('serve-static')
var app = stacked()
app.use(liveReload())
app.use(serveStatic('app/'))
var server = http.createServer(app)
Note: This expects a <body> tag to be present in the HTML.
Usage
middleware = liveReload([opt])
Returns a function middleware(req, res, next) which injects a LiveReload <script> tag into the body of an HTML script.
Options:
portthe live reload server port, default 35729hostthe host, defaultlocalhostpaththe script path, default'/livereload.js?snipver=1'localif true, the script will ignore theportandhostand assumes its hosted locally on the same domain, default falsetypethe script type, default"text/javascript", could also be"module"for ES modulesdefera boolean whether to add this attribute to the script tag, defaulttrueasynca boolean whether to add this attribute to the script tag, defaulttrue
You can also change the options at runtime:
var liveReload = require('inject-lr-script')
var liveInjector = liveReload()
handler.use(function (req, res, next) {
if (liveReload) {
liveInjector.host = myHost
liveInjector.port = myPort
liveInjector(req, res, next)
} else {
next()
}
})
See Also
- inject-lr-script-stream - a simpler, streaming approach
- connect-livereload - a similar approach
Changelog
- 2.x - major refactor: simplified and uses a connect-style middleware to improve performance/stability
- 1.x - uses Beefy to try and auto-detect mime type based on response events
License
MIT, see LICENSE.md for details.
FAQs
inject live reload into HTML content
The npm package inject-lr-script receives a total of 15,232 weekly downloads. As such, inject-lr-script popularity was classified as popular.
We found that inject-lr-script demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 01 Nov 2019
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Security News
ECMAScript 2025 Finalized with Iterator Helpers, Set Methods, RegExp.escape, and More
ECMAScript 2025 introduces Iterator Helpers, Set methods, JSON modules, and more in its latest spec update approved by Ecma in June 2025.
By Sarah Gooding - Jun 26, 2025
Security News
Node.js Homepage Adds Paid Support Link, Prompting Contributor Pushback
A new Node.js homepage button linking to paid support for EOL versions has sparked a heated discussion among contributors and the wider community.
By Sarah Gooding - Jun 25, 2025