
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
lc-mouse-drag
Advanced tools
Vanilla javascript (ES6) function enabling drag scrolling on desktop
No dependencies vanilla javascript function to easily implement a nice drag-to-scroll effect using dsektop mouse.
Everything in less than 2KB.
include lc-mouse-drag.min.js
call the function targeting one/multiple page elements and eventually fill optional parameters.
NB: first parameter may be a textual selector or a DOM object (yes, also jQuery objects)
<script type="text/javascript">
lc_mouseDrag('.target_elements',
0.3, // (float) ending dragging animation delta. 0.3 by default, 0 to disable.
0.3 means the dragged distance will be increased by 30% on mouse up with a smooth animation
false, // (bool) whether to ignore X-axis dragging
false // (bool) whether to ignore Y-axis dragging
);
</script>
NB: Is essential to have a proper HTML/CSS setup in order to have it working.
For example, on desktop, you must use overflow: hidden; on the target element.
Please check the demo.html code to better understand.
The function also sets an utility class on the BODY element to know if page is being viewed on a mobile device (not needing this function).
This is the CSS code used in the demo to apply the proper CSS only on affected devices
<style>
body:not(.lc_mousedrag_is_mobile) #inner {
overflow: hidden;
cursor: grab;
}
</style>
Copyright © Luca Montanari - LCweb
FAQs
Vanilla javascript (ES6) function enabling drag scrolling on desktop
The npm package lc-mouse-drag receives a total of 0 weekly downloads. As such, lc-mouse-drag popularity was classified as not popular.
We found that lc-mouse-drag demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.