Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Travis CI:
#HtmlToc
HtmlToc is a Ruby module that post-processes an HTML document to built a table of contents and insert it at a specified location. It takes in the source text of the page, and returns the modified text.
##About
The gem consists of a single module, HtmlToc, which exposes a single public method, process.
#process starts by performing a case-insensitive search for a pseudo-tag, <toc />. If it is found, the unmodified source text is return.
If the tag is found, #process scans for header tags falling within a provided range. If a matching header does not already have an id attribute, one is added. If no matching headers are found, the <toc /> pseudo-tag is removed and the modified source text is returned.
If headers are found, a link is generated for each matching header. The link text is taken from the header text, and the link's href points to the header's id. Each link wrapped in a div tag; the div is given a class name that matches is level relative to the search range. The link divs are wrapped in a few more divs with unique ids to create the table of contents. Lastly, the table of contents replaces the <toc /> pseudo-tag and the modified source is returned. The classes and id allow the page to be styled to match the website's design context. The resulting table of contents might look like this:
<div id='__toc'>
<div id='__toc_header'>Contents</div>
<div id='__toc_content' style='display:block'>
<div class='__toc_level_1'><a href='#id__1'>1 First (1st) major header</a></div>
<div class='__toc_level_2'><a href='#id__5'>1.1 Minor header 1</a></div>
<div class='__toc_level_3'><a href='#id__11'>1.1.1 Detail the first</a></div>
<div class='__toc_level_3'><a href='#already_here_1'>1.1.2 Detail the second</a></div>
<div class='__toc_level_2'><a href='#already_here_2'>1.2 Minor header 2</a></div>
<div class='__toc_level_1'><a href='#already_here_3'>2 Second major header</a></div>
<div class='__toc_level_2'><a href='#id__2'>2.1 Minor header 3</a></div>
<div class='__toc_level_3'><a href='#id__12'>2.1.1 Detail the third</a></div>
<div class='__toc_level_3'><a href='#already_here_4'>2.1.2 Detail the fourth</a></div>
<div class='__toc_level_2'><a href='#already_here_5'>2.2 Minor header 4</a></div>
</div>
</div>
##Use
HtmlToc.process source:, h_tags: Range.new(2, 6), show_toggle: false, use_numbers: false
source is a string holding the HTML source.
h_tags is a range of integers giving the indexes of the header tags that will be used to the table of contents. The method iterates through it to build the regular expression /<h#{x}(?: .*?)?>(.*?)</h#{x}>/i.
show_toggle flags whether or not to include a toggle button in the table of contents header. The span is programmed to call a Javascript method, ShowHideToc(). The implementing script is not included: it must be supplied by the programmer.
use_numbers flags whether or not the links will have outlining numbers.
##CSS
These classes and ids are used by HtmlToc in the table of contents.
#__toc - The outer frame div.
#__toc_header - The header div.
#__toc_content - The contents div.
#__toc_toggle - The span containing the toggle.
.__toc_level_x - Used on the divs holding the links, with x ranging from 1 to 6. These are applied as the header tags are found, so using the default h_tags, __toc_level_1 will be associated with h2 tags, __toc_level_2 with h3 tags, and so on.
##Additional files
See sample/html_toc.css for an example of how to style the table of contents.
See sample/html_toc.js for the Javascript to toggle visibility of the table of contents.
##Change log
1.2 - Fixed some issues where matches were not case insensitive, and change the table of contents indicator from a keyword token to a pseudo-tag. 1.1 - Added keyword arguments. 1.0 - Initial deployment.
FAQs
Unknown package
We found that html_toc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.