
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
CSS Naked Day is an annual event where websites remove all CSS from their site for one day to promote web standards. More information on this event can be found on the CSS Naked Day homepage.
This plugin makes a Rails application strip off the stylesheets during the
CSS Naked Day event. It does this by modifying the stylesheet_link_tag
helper to skip including stylesheets into the layout during the event.
Add the css_naked gem to your Rails application. With Rails 3.x, add the
following to you Gemfile
:
gem 'css_naked'
If you're using Rails 2.x without Bundler, you need to add config.gem 'css_naked'
to config/environments.rb
instead.
If you manually need to do stuff on CSS Naked Day (e.g. skipping stylesheets
you placed without using stylesheet_link_tag
or adding a note for visitors
why the stylesheets are missing), you can use the css_naked?
method:
<%- if css_naked? -%>
<h3>What happened to the design?</h3>
<p>To know more about why styles are disabled on this website visit the
<a href="http://naked.threepixeldrift.com" title="Web Standards Naked Day Host Website">
Annual CSS Naked Day</a> website for more information.</p>
<%- end -%>
To see, how your site will look like without any styles, you can manually activate
the CSS Naked Day mode by overriding the css_naked?
in application_helper.rb
:
def css_naked?
true
end
Andreas Neuhaus - zargony.com
FAQs
Unknown package
We found that css_naked demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.