Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Reference documentation and guides at cortexjs.io/mathlive.
Try it at cortexjs.io/mathlive/demo/.
To add a mathfield element to your page use a <math-field>
tag.
It works just like a <textarea>
or <button>
. You can manipulate the
mathfield using methods of the element and listen for events to be notified when
its internal state changes.
<!DOCTYPE html>
<html lang="en-US">
<body>
<math-field>f(x)=</math-field>
<script src="https://unpkg.com/mathlive"></script>
</body>
</html>
This project is licensed under the MIT License.
0.78.0 2022-08-11
The way errors are reported has changed.
Previously a math-error
event would be dispatched (or the onError
listener
would be invoked). This made it difficult to find out when an error no longer
applied.
font-not-found
: If the fonts fail to load, a class of
ML__fonts-did-not-load
is added to the document's body.invalid-keybinding
: A message is output to the console if a keybinding
includes a combination of keys which cannot be performed with the current
keyboard layoutmf.errors
, an array of LatexSyntaxError
. This property can
be consulted for example during the handler for a change
event.Inline shortcuts now only apply in math mode. The mode
property of
InlineShortcutDefinition
has been removed.
Internal: introduction of GlobalContext
to encapsulate information necessary
to parse and render: macro definitions, registers, definition of commands and
some optional settings. A mathfield is a GlobalContext
, but it is also used
when rendering static LaTeX.
The symbol used to indicate a placeholder (i.e. \placeholder{}
) can now be
customized with mf.setOptions({ placeholderSymbol: '?' })
.
Some symbols that work pretty well:
U+25A0
BLACK SQUARE
U+25A2
WHITE SQUARE WITH ROUNDED CORNERS
U+2B1A
DOTTED SQUARE
The following CSS variables can be used to control the appearance of the selection:
--selection-background-color-focused
--selection-background-color
--selection-color-focused
--selection-color
--caret-color
Spacing commands (e.g. \,
) now serialize a space when using the ascii-math
format
#1572 Keyboard events (keyup
, keydown
, keypress
) are now fired more
consistently. They can be intercepted by calling preventDefault()
during the
capture phase.
fractionNavigationOrder
to "denominator-numerator"
.paste
event and
doing a preventDefault()
on itclick
event is now dispatched when a click occurs
inside the mathfield.<header>
of the documentkeydown
events are now propagated for non-printable keys.skipBoundary
property) was skipped
when moving forwardFAQs
A web component for math input
The npm package mathlive receives a total of 72,170 weekly downloads. As such, mathlive popularity was classified as popular.
We found that mathlive demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.