Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
replace-text-in-bundle-plugin
Advanced tools
A webpack plugin for dynamically replacing text patterns in bundle files during the build process.
A webpack plugin for replacing text in bundle files.
Install the plugin using npm:
npm i --save-dev replace-text-in-bundle-plugin
Import the plugin in your webpack configuration file:
const ReplaceTextInBundlePlugin = require('replace-text-in-bundle-plugin');
Add an instance of the plugin to the plugins
array in your webpack configuration:
plugins: [
new ReplaceTextInBundlePlugin([
{
bundle: 'main.bundle.js',
from: '"${temp_base_url}"',
to: `window.site_base_url + "/some/path/to/"`,
},
{
bundle: 'style.css',
from: '${temp_base_url}',
to: '',
}
])
]
The plugin takes an array of objects as an argument. Each object represents a replacement configuration. The properties of the configuration object are as follows:
bundle
: The name of the generated bundle file to modify.from
: The text pattern to search for in the bundle.to
: The replacement text to use.In the above example, the plugin will replace "${temp_base_url}"
with window.site_base_url + "/some/path/to/"
in the main.bundle.js
file, and ${temp_base_url}
with an empty string in the style.css
file.
This plugin is useful when you need to dynamically replace specific text patterns in your bundle files during the webpack build process. For example, you may want to replace placeholder URLs or environment-specific values with actual values.
In the provided usage example, the plugin replaces the ${temp_base_url}
placeholder with a custom URL defined in the window.site_base_url
variable, concatenated with the value of /some/path/to/
. This allows you to dynamically set the base URL for your application or replace any other placeholders as needed.
Note: Make sure that the specified text patterns (from
) exist in the bundle files you're targeting, otherwise the plugin won't make any changes.
This project is licensed under the MIT License.
We welcome contributions from the community to enhance the plugin's functionality and address any issues. If you have any feedback, bug reports, or feature requests, please don't hesitate to open an issue or submit a pull request on GitHub.
FAQs
A webpack plugin for dynamically replacing text patterns in bundle files during the build process.
We found that replace-text-in-bundle-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.