Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
nanoscroller
Advanced tools
A jQuery plugin that offers a simplistic way of implementing Lion OS scrollbars.
nanoScroller.js is a jQuery plugin that offers a simple way of implementing Mac OS X Lion-styled scrollbars for your website.
It uses minimal HTML markup being .nano > .nano-content
. The other scrollbar div elements .pane > .nano-slider
are added during run time to prevent clutter in templating. The latest version utilizes native scrolling and works with the iPad, iPhone, and some Android Tablets.
To start using, you need three basic things:
The following type of markup structure is needed to make the plugin work:
<div id="about" class="nano">
<div class="nano-content"> ... content here ... </div>
</div>
Copy the HTML markup. Change .nano
into something related to your content. Though you can also remove that attribute as long as you have a parent div with an ID reference. e.g. #parent > .nano
. nano
and nano-content
classnames can be customized via plugin options (in that case you must rename them inside the plugin's CSS file as well).
Link to the nanoscroller.css
file inside your page's <head>
section (...or copy the contents from it to your page's main stylesheet file).
<link rel="stylesheet" href="nanoscroller.css">
You should specify a width and a height to your container, and apply some custom styling for your scrollbar. Here's an example:
.nano { background: #bba; width: 500px; height: 500px; }
.nano > .nano-content { padding: 10px; }
.nano > .nano-pane { background: #888; }
.nano > .nano-pane > .nano-slider { background: #111; }
Running this script will apply the nanoScroller plugin to all DOM elements with a .nano
className.
$(".nano").nanoScroller();
To scroll at the top:
$(".nano").nanoScroller({ scroll: 'top' });
To scroll at the bottom:
$(".nano").nanoScroller({ scroll: 'bottom' });
To scroll at the top with an offset value:
$(".nano").nanoScroller({ scrollTop: value });
To scroll at the bottom with an offset value:
$(".nano").nanoScroller({ scrollBottom: value });
To scroll to an element:
$(".nano").nanoScroller({ scrollTo: $('#a_node') });
To stop the operation. This option will tell the plugin to disable all event bindings and hide the gadget scrollbar from the UI.
$(".nano").nanoScroller({ stop: true });
Destroys nanoScroller and restores browser's native scrollbar.
$(".nano").nanoScroller({ destroy: true });
To flash the scrollbar gadget for an amount of time defined in plugin settings (defaults to 1,5s). Useful if you want to show the user (e.g. on pageload) that there is more content waiting for him.
$(".nano").nanoScroller({ flash: true });
Refresh the scrollbar. This simply re-calculates the position and height of the scrollbar gadget.
$(".nano").nanoScroller();
A custom 'scrollend'
event is triggered on the element every time the user has scrolled to the end of the content element (does not get triggered more than once when user tries to scroll down and has already reached the end of scrollable content).
$(".nano").bind("scrollend", function(e){
console.log("current HTMLDivElement", e.currentTarget);
});
Some browsers trigger this event more than once each time, so to listen to the custom event, instead of using jQuery's normal .bind
or .on
, you most likely want to use this tiny jQuery debounce plugin to prevent browsers from firing your function more than once every 100ms.
$(".nano").debounce("scrollend", function() {
alert("The end");
}, 100);
Same as the 'scrollend'
event, but it is triggered every time the user has scrolled to the top of the content element.
Same as the 'scrolltop'
and 'scrollend'
events, but it's triggered every time the user scrolls. It also carries a JavaScript object with the current position, the maximum height and the direction (up
or down
).
$(".nano").on("update", function(event, values){
console.debug( values );
});
There are a few options that you can change when running nanoScroller, e.g. $(".nano").nanoScroller({ paneClass: 'myclass' });
Set to true if you want to use native scrolling in iOS 5+. This will disable your custom nanoScroller scrollbar in iOS 5+ and use the native one instead. While the native iOS scrollbar usually works much better, there could possibly be bugs in certain situations.
Notice that .pane
and .slider
elements are not generated/added for devices that support iOS native scrolling when iOSNativeScrolling
option is enabled.
Default: false
$(".nano").nanoScroller({ iOSNativeScrolling: true });
Sets the minimum height of the slider element.
Default: 20
$(".nano").nanoScroller({ sliderMinHeight: 40 });
Sets the maximum height of the slider element.
Default: null
$(".nano").nanoScroller({ sliderMaxHeight: 200 });
Set to true to prevent page scrolling when top or bottom inside the content div is reached.
Default: false
$(".nano").nanoScroller({ preventPageScrolling: true });
Set to true to disable the resize from nanoscroller. Useful if you want total control of the resize event. If you set this option to true remember to call the reset method so that the scroll don't have strange behavior.
Default: false
$(".nano").nanoScroller({ disableResize: true });
Set to true to stop the scrollbar from auto-hiding itself.
Default: false
$(".nano").nanoScroller({ alwaysVisible: true });
Use this setting to specify the scrollbar hide delay in milliseconds if you have enabled the flash
option.
$(".nano").nanoScroller({ flashDelay: 1000 });
Default: 1500
A classname for scrollbar track element. If you change this setting, you also have to change it in the plugin's CSS file.
Default: 'nano-pane'
$(".nano").nanoScroller({ paneClass: 'scrollPane' });
A classname for scrollbar thumb element. If you change this setting, you also have to change it in the plugin's CSS file.
Default: 'nano-slider'
$(".nano").nanoScroller({ sliderClass: 'scrollSlider' });
A classname for your content div. If you change this setting, you also have to change it in the plugin's CSS file.
Default: 'nano-content'
$(".nano").nanoScroller({ contentClass: 'sliderContent' });
Set the tab order of the scrollable content. Set to -1 to skip over the scrollable content when tabbing.
Default: 0
$(".nano").nanoScroller({ tabIndex: 0 });
The plugin works by creating a scrollbar gadget (with pre-defined css for styling) and then subscribing the .nano-content
's scroll events to it. Mouse press and drag events are also subscribed to the .nano-pane
and .nano-pane > .nano-slider
to emulate the native scrollbar's mechanism. The system scrollbars are hidden from the viewport (Fig 1). By doing this, we still retain the natural scrolling experience provided by the OS.
We are still working on doing a horizontal scrolling feature. If you're interested in contributing to the project, you are free to fork it and create a pull request.
To build nanoScroller from source you need the following libraries installed:
npm install -g grunt-cli
npm install
to install all dependencies.grunt
to build nanoScrollerbrew install phantomjs
.grunt test
in terminalTested desktop browsers:
Mobile support:
If you find a bug, please report here at the issues section.
You can use overthrow.js polyfill (~1.5kb minified and gzipped) to make nanoScroller work on many mobile devices. It emulates CSS overflow (overflow: auto;/overflow: scroll;) in devices that are lacking it.
To use overthrow, link to the javascript file in your HTML document...
<script src="overthrow.js"></script>
...and add an overthrow
class to your content
div.
<div id="about" class="nano">
<div class="overthrow nano-content"> ... content here ... </div>
</div>
Other people who have contributed code:
FAQs
A jQuery plugin that offers a simplistic way of implementing Lion OS scrollbars.
We found that nanoscroller demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.