Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
react-18-input-autosize
Advanced tools
A text input for React that resizes itself to the current content.
Live demo: jedwatson.github.io/react-input-autosize
To run the examples locally, run:
npm install
npm start
Then open localhost:8000 in a browser.
The easiest way to use React-Input-Autosize is to install it from NPM and include it in your own React build process (using Browserify, rollup, webpack, etc).
You can also use the umd build by including dist/AutosizeInput.js
in your page. If you use this, make sure you have already included a umd React build.
npm install react-input-autosize --save
React-Input-Autosize generates an input field, wrapped in a <div>
tag so it can detect the size of its value. Otherwise it behaves very similarly to a standard React input.
import AutosizeInput from 'react-input-autosize';
<AutosizeInput
name="form-field-name"
value={inputValue}
onChange={function(event) {
// event.target.value contains the new value
}}
/>
The styles applied to the input are only copied when the component mounts. Because of this, subsequent changes to the stylesheet may cause size to be detected incorrectly.
To work around this, either re-mount the input (e.g. by providing a different key
prop) or call the copyInputStyles()
method after the styles change.
The input will automatically inject a stylesheet that hides IE/Edge's "clear" indicator, which otherwise breaks the UI. This has the downside of being incompatible with some CSP policies.
To work around this, you can pass the injectStyles={false}
prop, but if you do this I strongly recommend targeting the input
element in your own stylesheet with the following rule:
input::-ms-clear {display: none;}
If your input uses custom font sizes, you will need to provide the custom size to AutosizeInput
.
<AutosizeInput
name="form-field-name"
value={inputValue}
inputStyle={{ fontSize: 36 }}
onChange={function(event) {
// event.target.value contains the new value
}}
/>
AutosizeInput
is a controlled input and depends on the value
prop to work as intended. It does not support being used as an uncontrolled input.
Copyright (c) 2018 Jed Watson. MIT License.
v3.0.0 / 2020-12-11
This release adds support for React 17 and removes usage of UNSAFE React lifecycle methods, thanks to Nathan Bierema.
It should be a fairly painless major upgrade since the API hasn't been changed at all. It's being published as 3.0.0
because the peer dependency range has been updated and the internal implementation has changed.
FAQs
Auto-resizing Input Component for React
The npm package react-18-input-autosize receives a total of 7,513 weekly downloads. As such, react-18-input-autosize popularity was classified as popular.
We found that react-18-input-autosize demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.