Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
wicg-focus-ring
Advanced tools
Based on the proposed CSS
:focus-ring
pseudo-selector,
this prototype adds a focus-ring
class to the focused element,
in situations in which the :focus-ring
pseudo-selector should match.
npm install --save wicg-focus-ring
We recommend only using versions of the polyfill that have been published to npm, rather than cloning the repo and using the source directly. This helps ensure the version you're using is stable and thoroughly tested.
If you do want to build from source, make sure you clone the latest tag!
...
<script src="/node_modules/wicg-focus-ring/dist/focus-ring.js"></script>
</body>
</html>
We suggest that users
selectively disable the default focus style
by selecting for the case when the polyfill is loaded
and .focus-ring
is not applied to the element:
/*
This will hide the focus indicator if the element receives focus via the mouse,
but it will still show up on keyboard focus.
*/
.js-focus-ring :focus:not(.focus-ring) {
outline: 0;
}
If there are elements which should always have a focus ring shown,
authors may explicitly add the focus-ring
class.
If explicitly added, it will not be removed on blur
.
The script uses two heuristics to determine whether the keyboard is being used:
focus
event immediately following a keydown
event where the key pressed was either Tab
,
Shift + Tab
, or an arrow key.The :focus-ring
polyfill uses the
Element.classList API which is
not supported in IE 8-9. In accordance with the W3C's new Polyfill
guidance, the
:focus-ring
polyfill does not bundle other polyfills. If you need to support these older browsers
you should add the classList polyfill to your page
before loading the :focus-ring
polyfill. Using a service like
Polyfill.io will handle feature detecting and loading the necessary
polyfills for you.
FAQs
Polyfill for :focus-ring pseudo-selector
We found that wicg-focus-ring demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.