
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
leancloud-push
Advanced tools
支持服务端模拟客户端接收推送消息。
const LCPush = require('leancloud-push');
const appId = 'appId';
const appKey = 'appKey';
const installationId = LCPush.genInstallationId();
// 初始化 client 实例,如果只是拿来发推送 installationId 非必须参数
const push = new LCPush({ appId, appKey, installationId });
// 如果想接收推送,需要调用 open 方法,开启和服务器的连接,上步中 installationId 是必须参数
push.open((error) => {
if (error) {
console.log(`连接错误,${error}`);
} else {
console.log('连接服务器成功,可以接收推送');
}
});
// 发送推送
push.sendPush({
data: {
alert: '跨越长城,走向世界。',
},
}, (error, body) => {
if (error) {
console.log(`错误:${error.stack}`);
} else {
console.log(body);
}
});
// 接收到推送消息
push.on('message', (data) => {
console.log(`消息:${JSON.stringify(data)}`);
});
// 监听网络异常,SDK 会在底层自动重新连接服务器
push.on('reuse', () => {
console.log('异常:网络中断正在重试。。。');
});
// 捕捉错误
push.on('error', (error) => {
console.log(`错误:${error.stack}`);
});
MIT
FAQs
The npm package leancloud-push receives a total of 1 weekly downloads. As such, leancloud-push popularity was classified as not popular.
We found that leancloud-push demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.