
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
react-electron-web-view
Advanced tools
A simple wrapper of the Electron WebView element to allow it's magical props in React
The easiest way to use react-electron-web-view is to install it from NPM and require
or import
it in your Electron application.
You can also use the standalone build by including dist/react-electron-web-view.js
in your page. If you use this, make sure you have already included React, and it is available as a global variable.
npm install react-electron-web-view --save
Or for the hipsters out there
yarn add react-electron-web-view
All events and methods on the WebView element are proxied through react. You find the documentation on these events and methods here
const WebView = require('react-electron-web-view');
<WebView src="https://www.google.com" />
In addition to the documented Electron WebView properties we have a few extra ones
className
String - Sets the className of the WebView elementstyle
Object - Sets the style of the wrapping div element.muted
Boolean - Sets the muted state of the webContentsdevtools
Boolean - true
if the devtools should be open, false
otherwiseBehind the scenes this renders a div and the unsafely sets the innerHTML of that div to be a webview element. This hasn't been completely tested so make sure it works for you.
src
, lib
and the build process)NOTE: The source code for the component is in src
. A transpiled CommonJS version (generated with Babel) is available in lib
for use with node.js, browserify and webpack.
MIT
Copyright (c) 2016 Samuel Attard.
FAQs
Electron WebView
We found that react-electron-web-view demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.