
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
office-ui-fabric
Advanced tools
The front-end framework for building experiences for Office 365.
#####The front-end framework for building experiences for Office and Office 365.
Fabric is a responsive, mobile-first collection of styles and tools designed to make it quick and simple for you to create web experiences using the Office Design Language.
##Contents
##Get started For a quick start, reference the latest release of Fabric from a CDN or add a copy to your project. See Get Started on the Office UI Fabric site for full details.
Want to customize Fabric for your project? See Building Fabric to learn about the build process.
##Learn more
New to Fabric? Start with What is Office UI Fabric? to understand its purpose, and then explore the full set of styles and components to get a feel for what you can build.
When you're ready to create a simple app or Office Add-in with Fabric, follow along with the Fabric Tutorial or Use Office UI Fabric with Office Add-ins on MSDN.
##Contribute to Fabric
Bug reports, feature requests, and questions are posted on the issue tracker. For details on our contribution process and how we label issues, see our Contributing page.
##Licenses
All files on the Office UI Fabric GitHub repository are subject to the MIT license. Please read the License file at the root of the project. Usage of the fonts referenced on Office UI Fabric files is subject to the license.
##Changelog We use GitHub Releases to manage our releases, including the changelog between every release. View a complete list of additions, fixes, and changes since 1.0 on the releases page.
FAQs
The front-end framework for building experiences for Office 365.
We found that office-ui-fabric demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.