Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
volto-dropdownmenu
Advanced tools
Volto addon for a customizable dropdown menu. Intended to be used with collective.volto.dropdownmenu
To be used with mrs-developer, see Volto docs for further usage informations.
Created with voltocli.
Afer installation, please add following lines into package.json to enable it.
"addons": [
"volto-dropdownmenu"
],
If you are using Volto < 16, then use v2.4.3
If you are using Volto < 12, then use v1.3.0
Simply load the addon in your project, then edit the configuration in /controlpanel/dropdown-menu-settings
.
Example configuration to be saved in Plone here.
To use the default template for the dropdown menu, add src/addons/volto-dropdownmenu/src/customizations
in your package.json
in customizationPaths
.
"customizationPaths": [
"src/customizations",
"src/addons/volto-dropdownmenu/src/customizations"
]
To customize the MenuConfigurationForm
component, you can now create your own component in your site and replace it using the Volto component registry in your site config file:
import MyMenuConfigurationForm from './src/MyMenuConfigurationForm';
config.registerComponent({
name: 'MenuConfigurationForm',
component: MyMenuConfigurationForm,
});
By default, navigations roots are clickable, but there's the possibility to make them not clickable. Enabling the field 'clickableNavigationRoots' in volto-dropdownmenu config, a field appears in configuration form and let editor to decide if make navigation roots clickable or not.
config.settings["volto-dropdownmenu"] = {
"options": {
"clickableNavigationRoots": true, //if true, a checkbox option in dropdown menu appears
},
};
You can watch a demonstration video on YouTube
FAQs
Volto addon for a customizable dropdown menu
We found that volto-dropdownmenu demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.