
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
LinkedIn's JavaScript viewport tracking library and IntersectionObserver polyfill. Track what the user actually sees.
import { IntersectionObserver } from 'spaniel';
new IntersectionObserver((entries) => { console.log('I see you') }, {
threshold: 0.5
}).observe(document.getElementById('my-element'));
Practical uses included:
Spaniel provides additional abstractions on top of IntersectionObserver, provides APIs for hooking into the low-level internals, and has some limitations as a non-complete polyfill. Learn more by reading the Usage and API Docs.
requestAnimationFrame
requestAnmiationFrame
task/utility APISpaniel has both unit tests and a headless test suite. The headless tests are run using Nightmare.
Checkout size.txt to see the current minified UMD gzipped size.
You can also run npm run stats
to measure locally.
Spaniel is a standard NPM/CommonJS module. You can use a build tool like browserify or webpack to include Spaniel in your application.
If you're using rollup, an ES6 version is built at /exports/es6/spaniel.js
(as noted by jsnext:main
in package.json
).
Alternatively, running npm run build will generate a UMD file at /exports/spaniel.js
, and a minified UMD file at /exports/min/spaniel.js
. You can use the minified file in production.
The Spaniel source code is written in TypeScript.
You will need testem
installed globally to run the tests.
npm install -g testem
You will also need to install phantom.js globally.
// Install dependencies
npm install
// Run build
npm run build
// Watch and auto-rebuild
npm run watch
// Serve test app
npm run serve
// Run the tests
npm run test
Copyright 2017 LinkedIn Corp. All rights reserved.
FAQs
LinkedIn's viewport tracking library
The npm package spaniel receives a total of 476 weekly downloads. As such, spaniel popularity was classified as not popular.
We found that spaniel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.