
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
tangy-form-editor
Advanced tools
[](https://travis-ci.org/Tangerine-Community/tangy-form-editor)
The <tangy-form-editor> element is a Web Component for editing the contents a <tangy-form>. Just place <tangy-form-editor> tags around your <tangy-form> and the editor enables, no serverside dependencies required.
Add the following global dependencies to your HTML.
<link href="https://fonts.googleapis.com/css?family=Roboto:300,400,500" rel="stylesheet">
<link href="https://fonts.googleapis.com/css?family=Material+Icons&display=block" rel="stylesheet">
<script src="https://cdnjs.cloudflare.com/ajax/libs/webcomponentsjs/2.2.10/webcomponents-loader.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/redux/4.0.4/redux.js"></script>
<script src="https://unpkg.com/js-beautify/js/lib/beautify-html.js"></script>
<script src="https://unpkg.com/tangy-form@latest/dist/bundle.js" type="module"></script>
<script src="https://unpkg.com/tangy-form-editor@latest/dist/bundle.js" type="module"></script>
For apps using a bundler, install using NPM and then import into your app.
npm install --save tangy-form-editor
import `tangy-form-editor/tangy-form-editor.js`
You have to copy an ace build to your root directory in order to get syntax highlighting. In an angular-cli project (as of Angular 4) you can do this by adding the following assets entry to your apps build target.
{ "glob": "**/*", "input": "../node_modules/ace-builds/src-noconflict/", "output": "./" },
See related issue: https://github.com/Juicy/juicy-ace-editor/issues/39#issuecomment-406710315
Encapsulate a tangy-form with tangy-form-editor then listen for the tangy-form-editor's change event for updates on the form HTML.
<tangy-form-editor>
<template>
<tangy-form id="field-demo" title="Field Demo">
<tangy-form-item id="text_inputs_1" title="Text Inputs 1">
<template>
<tangy-input name="text_input_1" label="This is an input for text." type="text"></tangy-input>
</template>
</tangy-form-item>
<tangy-form-item id="text_inputs_2" title="Text Inputs 2">
<template>
<tangy-input name="text_input_2" label="This is an input for text that is required." type="text" error-message="This is required." required></tangy-input>
</template>
</tangy-form-item>
<tangy-form-item id="summary" summary title="Summary">
<template>
Thank you for taking our survey.
</template>
</tangy-form-item>
</tangy-form>
</template>
</tangy-form-editor>
<script>
// You can listen for changes.
document.querySelector('tangy-form-editor').addEventListener('change', event => console.log(event.detail))
// Or at any point you can get the current formHtml from the formHtml property.
console.log(document.querySelector('tangy-form-editor').formHtml)
</script>
See DEVELOPER.md for docs.
The combination of CKEditor breaking when used in Shadow DOM and Firefox / IE shadow DOM support is still behind a flag, this means this element does not currently work in Firefox and IE.
Follow the instructions for the tangy-translate library to enable translated or alternate labels.
Tangerine is a registered trademark of RTI International. This software is licensed under the GPLv3 License.
v7.22.0, v7.22.1, v7.22.2, v7.22.3, v7.22.4, v7.22.5
FAQs
[](https://travis-ci.org/Tangerine-Community/tangy-form-editor)
The npm package tangy-form-editor receives a total of 37 weekly downloads. As such, tangy-form-editor popularity was classified as not popular.
We found that tangy-form-editor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.