
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
Zoom in, zoom out on (almost) anything in your page.
Include with a script tag, or install with your package manager of choice (Bower/Component/npm).
Zoomerang.listen('#my-image')
Now when you click on #my-image, it will... of course, zoom in. When you click again, it will zoom back out to its original place. (get it?)
This is largely inspired by Medium's avatar zoom in effect, with improvements (you can resize / scroll the page when it's zoomed in and it still works). Please note it depends on the way browsers handle CSS transforms and has limited compatibility.
display: block, display: inline-block and img elements.Attach click listeners to all matched elements. You can also directly pass in a single node to this method.
Zoom in on the matched element. Fires optional callback when the transition is done.
Zoom out if currently zoomed-in. Fires optional callback when the transition is done.
Takes an options object. Available options (all options take valid CSS values):
transitionDuration - default: '.4s'transitionTimingFunction - default: 'cubic-bezier(.4,0,0,1)'bgColor - default: '#fff'bgOpacity - default: 1maxWidth - max element width when zoomed-in. default: 300maxHeight - max element height when zoomed-in. default: 300deepCopy - whether to copy innerHTML. If target element has complicated inner structure you might need this to make it work. default: falseonOpen - a callback function that will be called when a target is zoomed in and transition has ended. It will get the target element as the argument.onClose - same as onOpen, except fired when zoomed out.onBeforeOpen - a callback function, that will be called before zoom-in.onBeforeClose - a callback function, that will be called before zoom-out.MIT
Brought to you by @youyuxi.
FAQs
drop-in zoomer for anything
We found that zoomerang demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.