
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
run-browser
Advanced tools
The simplest way to run testling type tests in the browser
npm install run-browser -g
run-browser <file> <options>
Options:
-p --port <number> The port number to run the server on (default: 3000)
-b --phantom Use the phantom headless browser to run tests and then exit with the correct status code (if tests output TAP)
-r --report Generate coverage Istanbul report. Repeat for each type of coverage report desired. (default: text only)
-t --timeout Global timeout in milliseconds for tests to finish. (default: Infinity)
Example:
run-browser test-file.js --port 3030 --report text --report html --report=cobertura
Basic usage:
var runBrowser = require('run-browser');
var server = runBrowser('tests/test.js');
server.listen(3000);
Advanced Usage:
var runBrowser = require('run-browser');
var handler = runBrowser.createHandler('tests/test.js');
var server = http.createServer(function (req, res) {
if (runBrowser.handles(req)) {
return handler(req, res);
}
// any other server logic here
});
server.listen(3000);
For advanced phantomjs usage, just read the source in ./bin/cli.js
MIT
FAQs
The simplest way to run testling type tests in the browser
We found that run-browser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.