Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
react-zeroclipboard
Advanced tools
This is a wrapper around ZeroClipboard for use with React. ZeroClipboard has a difficult to work with api which is being abstracted from you. This library...
zero-clipboard uses flash which is being phased out across many browsers, and is sometimes buggy in the browsers that do support it. There have been reports of the plugin randomly not working, despite no significant changes to the plugin, and keeping the same zero-clipboard version.
If you're interested in solving this, your help is very much appreciated, and this section will be replaced with a big "thank you" for your work. Until then, using this plugin isn't recommended.
This is only available through npm, it should work with browserify or webpack. It's compatible with react 0.13 and up.
npm install --save react-zeroclipboard
Or for react 0.11 and 0.12
npm install --save react-zeroclipboard@0.4
Also install react if you haven't already (of course).
Here's a simple example:
render: function(){
return (
<div>
<p>Click the button to copy some text</p>
<ReactZeroClipboard text="Hello, world!">
<button>Copy</button>
</ReactZeroClipboard>
</div>
)
}
The full api offers more flexibility. If you provide e.g. html and text, they'll both be set and the application you're pasting into decides which one to use. Methods have higher priority than the literal strings, if for some reason you pass both.
<ReactZeroClipboard
text="text to copy"
html="<b>html to copy</b>"
richText="{\\rtf1\\ansi\n{\\b rich text to copy}}"
getText={(Void -> String)}
getHtml={(Void -> String)}
getRichText={(Void -> String)}
onCopy={(Event -> Void)}
onAfterCopy={(Event -> Void)}
onErrorCopy={(Error -> Void)}
onReady={(Event -> Void)}
// optional
swfPath="http://user_defined_cdn_path/ZeroClipboard.swf"
/>
Here's an example where we copy the current url to the clipboard, both in plain text and a html anchor
If the user pastes this in their address bar they get the url, and if they paste it in gmail they get a nice link.
render: function(){
return (
<div>
<p>Copy a link to this page</p>
<ReactZeroClipboard
getText={function(){ return location.href; }}
getHtml={function(){ return '<a href="' + location.href + '">My Page</a>'; }}>
<button>Copy</button>
</ReactZeroClipboard>
</div>
)
}
Usually this is caused by flash weirdness and/or cdnjs where we pull ZeroClipboard from. You can work around this by hosting ZeroClipboard and the swf yourself. Make sure the page and the two assets are either both http, or both https. There's a copy of the swf in the assets directory of this repo.
To access it with webpack, configure a loader for swf files:
{
test: /\.swf$/g,
loader: 'file-loader'
}
And then import the swf from this package.
<ReactZeroClipboard swfPath={ require('react-zeroclipboard/assets/ZeroClipboard.swf') }>
FAQs
react component for zeroclipboard
The npm package react-zeroclipboard receives a total of 666 weekly downloads. As such, react-zeroclipboard popularity was classified as not popular.
We found that react-zeroclipboard demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.