
Security News
Static vs. Runtime Reachability: Insights from Latio’s On the Record Podcast
The Latio podcast explores how static and runtime reachability help teams prioritize exploitable vulnerabilities and streamline AppSec workflows.
react-crowdriff-gallery
Advanced tools
React component to put a CrowdRiff embed code in a React app
This lightweight component allows CrowdRiff customers to embed their galleries on websites built in React
Install via npm or your package manager of choice!
npm install react-crowdriff-gallery
Import and use
import { CrowdRiffGallery } from 'react-crowdriff-gallery'
class App extends Component {
render() {
<div>
<CrowdRiffGallery hash="hash1234" />
</div>
}
}
Prop Name | isRequired | type | Description |
---|---|---|---|
hash | true | string | 8 or 16 character hash found in the gallery's embed code |
The gallery hash is located within the id field of the embed code, prepended by either cr-init__
or cr__init-
depending on the version.
<script id="cr-init__1234hash" src="https://starling.crowdriff.com/js/crowdriff.js" async></script>
OR
<script id="cr__init-1234hash" src="https://embed.crowdriff.com/js/init?hash=1234hash" async></script>
The component handles the embedding of the script onto the page, as well as hooking into the crowdriff__gallery window object that registers and renders gallery objects. As a result, the setup and teardown is in the componentDidMount
and componentWillUnmount
lifecycle methods. If you want to dynamically change gallery hashes, set a key
prop equal to the hash on the component to trigger a new instance of the component.
Dynamic gallery example
class DynamicGallery extends Component {
render() {
<div>
<CrowdRiffGallery hash={this.props.hash} key={this.props.hash} />
</div>
}
}
FAQs
React component to put a CrowdRiff embed code in a React app
The npm package react-crowdriff-gallery receives a total of 220 weekly downloads. As such, react-crowdriff-gallery popularity was classified as not popular.
We found that react-crowdriff-gallery demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The Latio podcast explores how static and runtime reachability help teams prioritize exploitable vulnerabilities and streamline AppSec workflows.
Security News
The latest Opengrep releases add Apex scanning, precision rule tuning, and performance gains for open source static code analysis.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.