
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
linkify-react
Advanced tools
The linkify-react npm package is a React component for converting plain text containing URLs, email addresses, and hashtags into clickable links. It is useful for dynamically rendering user-generated content where such elements need to be identified and converted into interactive links.
Convert URLs to clickable links
This feature allows you to convert plain text URLs into clickable links. The `defaultProtocol` option ensures that URLs without a specified protocol are treated as HTTPS links.
import React from 'react';
import Linkify from 'linkify-react';
const options = {
defaultProtocol: 'https'
};
const text = 'Check out this website: www.example.com';
const App = () => (
<Linkify options={options}>{text}</Linkify>
);
export default App;
Convert email addresses to mailto links
This feature converts plain text email addresses into clickable mailto links, making it easy for users to send emails directly from the rendered content.
import React from 'react';
import Linkify from 'linkify-react';
const text = 'Contact us at support@example.com';
const App = () => (
<Linkify>{text}</Linkify>
);
export default App;
Convert hashtags to clickable links
This feature converts hashtags into clickable links. The `formatHref` option allows you to customize the URL format for hashtags, such as linking to a Twitter search for the hashtag.
import React from 'react';
import Linkify from 'linkify-react';
const options = {
formatHref: (href, type) => {
if (type === 'hashtag') {
return 'https://twitter.com/hashtag/' + href.substring(1);
}
return href;
}
};
const text = 'Follow the conversation at #example';
const App = () => (
<Linkify options={options}>{text}</Linkify>
);
export default App;
react-linkify is a similar package that also converts URLs, email addresses, and hashtags in plain text into clickable links. It is simpler and more lightweight compared to linkify-react, but it may lack some of the advanced customization options available in linkify-react.
react-autolinker is another package that provides similar functionality by converting URLs, email addresses, and phone numbers into clickable links. It uses the Autolinker.js library under the hood and offers a range of customization options. It is comparable to linkify-react in terms of features and flexibility.
Linkify React component. Use it to find URLs, email addresses and more in child strings and replace them with strings and <a> elements.
Install from the command line with NPM
npm install linkifyjs linkify-react
Import into your JavaScript with require
const Linkify = require('linkify-react');
or with ES modules
import Linkify from 'linkify-react';
const contents = 'helloworld.com';
<Linkify options={...}>
{contents}
</Linkify>
MIT
v4.3.2
FAQs
React element interface for linkifyjs
The npm package linkify-react receives a total of 323,402 weekly downloads. As such, linkify-react popularity was classified as popular.
We found that linkify-react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.