Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
An asset pipeline plugin for Rails to easily add the Entypo icon font faces and an initial set of icon classes.
The Entypo pictograms by Daniel Bruce http://www.entypo.com/
are provided in vendor
. These pictograms are licensed under
CC BY 3.0 and the font unter
SIL Open Font License.
Add this line to your application's Gemfile:
gem 'entypo-rails'
And then execute:
$ bundle
Then start your server and open
http://localhost:3000/entypo/charmap
Either use the provided mappings, based on icons-...
and the :before
:
// application.css
*= require entypo
@charset "UTF-8";
<!-- some_template.html... -->
This is cool <i class="icon-thumbs-up"></i>.
Fork it on <i class="icon-social-github"></i>.
or just include the entypo font face and do the mappings yourself, go to
http://localhost:3000/entypo/charmap in your browser for a list of all
unicode codepoints and CSS classes. This is only available in development
mode. Alternatively check out entypo.scss,
the social font is prefixed with .icon-social-
.
// application.css
//= require entypo-fonts
@charset "UTF-8";
// icons.scss (or wherever)
i.cool { font-family: 'entypo' }
i.cool:before { content: "\1F44D"; }
<!-- some_template.html... -->
This is cool <i class="cool"></i>.
icon
prefixSimply add an initializer like e.g. config/initializers/entypo.rb
and add:
Entypo.css_prefix = "my-icon"
After setting a new prefix restart your server and ensure to clear the Rails
asset caches in tmp/cache/asset
, otherwise the new prefix might not be
picked up correctly.
Note: that the value is not checked, thus ensure to use onlu valid CSS class names.
/entypo/charmap
in a non-development environmentBy default entypo-rails only enables the /entypo/charmap
route in the
development environment. To enable it in another environment open the
environment specific configuration file from config/environments/<env>.rb
and append:
# at the end of the file...
Entypo.charmap = true
To use a custom URL for to display the charmap, first disable the automatic
route generation by adding an initializer e.g. config/initializers/entypo.rb
with:
Entypo.charmap = false
Then add a new route to your application's config/routes.rb
file:
Your::Application.routes.draw do
# other routes...
get '/custom/path/to/charmap', to: 'entypo/charmap#index'
end
The prefix icon
clashes with the prefix defined by
bootstrap and thus I'm
not able to use entypo icons.
The prefix can be changed by setting Entypo.css_prefix = "e-icon"
in an
initializer. Ensure that after changing the prefix the caches in
tmp/cache/assets
should be cleared, otherwise it can happen that the prefix
is not picked up during development.
In production, the fonts are digested to entypo- 4a74efb3ed26fe0c57556bcc0b7e871f... Meanhwile it's just entypo.eot in the CSS file, without the digest. Therefore the font cannot be loaded!
When compiling assets ensure to set the correct RAILS_ENV
, otherwise assets
or not digested in the CSS files. See
this discussion for more, or
simply ensure to run:
RAILS_ENV=production rake assets:precompile
3.0.0
/entypo/charmap
2.2.3
google-plus
icon names, #16 by @medinarodel2.2.1
/entypo/charmap
again2.1.0
2.0.2
2.0.1
2.0.0
entypo-social
font family no longer exists1.0.2
1.0.0
git checkout -b my-new-feature
)git commit -am 'Added some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that entypo-rails demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.