Security News
Input Validation Vulnerabilities Dominate MITRE's 2024 CWE Top 25 List
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Write code with no literal
npm i -D noliter
Create html element with builder.
declare type HTMLElementTagNames = keyof HTMLElementTagNameMap;
declare type Builder<H extends HTMLElementTagNames> = (element: HTMLElementTagNameMap[H]) => void;
declare function createAnchor(builder?: Builder<"a">): HTMLAnchorElement;
declare function createInput(builder?: Builder<"input">): HTMLElement;
declare function createSpan(builder?: Builder<"span">): HTMLElement;
...
createAnchor((anchor) => {
anchor.href = 'https://www.google.com/';
anchor.appendChild(createSpan((span) => {
span.textContent = 'Google';
}));
});
createInput((input) => {
input.value = 'This is example!';
});
Joins multiple classNames into a single string.
declare function joinClassNames(...classNames: (undefined | null | boolean | number | string)[]): string;
element.className = joinClassNames('header', isOpen && 'open');
Remove all of children from element.
declare function removeChildren<N extends Node>(parent: N): void;
removeChildren(element);
Returns true if parameter is form of email, otherwise returns false.
declare function isEmail(str: string): any;
isEmail("simple@example.com") === true;
isEmail("A@b@c@example.com") === false;
Filter only numbers from string.
declare function matchNumber(str: string): RegExpMatchArray;
matchNumber("1a39b02c8") === ["1", "39", "2", "8"];
Remove all of whitespace from string.
declare function removeWhitespace(str: string): string;
removeWhitespace(" t es t ") === "test";
Remove all of xml tag from string.
declare function removeXmlTag(str: string): string;
removeXmlTag("<p>test</p>") === "test";
Remove all of character reference from string.
declare function removeCharacterReference(str: string): string;
removeCharacterReference("&nsbp;tes&nsbp;t") === "test";
FAQs
Write code with no literal
The npm package noliter receives a total of 1 weekly downloads. As such, noliter popularity was classified as not popular.
We found that noliter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.