Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Integrates PDF generation into a Tilt flow for maxxed out ease of use.
Contrary to other solutions, all files will be rendered locally without relying on a web server. It follows that even if used in a web server, no concurrent requests are being made to render assets.
This gem depends on PDFKit, which in turn requires wkhtmltopdf
. It is
recommended to use the statically compiled version of the latter, as it is
built against a patched QT that supports more features.
Add tilt-pdf
to your Gemfile. Also add any template engine you may optionally
want, such as less
or slim
.
A foo
template is currently threefold:
foo.rpdf
: this file is a YAML file containing options pertaining to the PDF
generation process, such as page size, orientation, metadata, support files,
headers and footers. Some options are passed as is to PDFKit, and
subsequently to wkhtmltopdf
.foo.html
: this document can be written in any template language you need
(such as ERB or Slim), and the Tilt template resolution system via extension
chaining will apply. Tilt will pass the render block to be yielded to this
document.foo.css
: this stylesheet can be written in any template language you need
(such as Sass or Less), and the Tilt template resolution system via extension
chaining will apply. Tilt will pass the block to be yielded to this
template, so you'd rather not yield
if you fancy using .css.erb
.The three files must currently be stored in the same directory.
Rendering is done the usual Tilt way:
require 'tilt-pdf'
pdf = Tilt.new('foo.rpdf').render()
This file contains options. If empty, it is made to 'just work' as summplemental files will be looked up according to its basename.
main
: document body, overriding the default derived from the basename.footer
and header
: html that will get used for (surprise!) header and
footers.stylesheets
: list of stylesheets to include (used for all html, incl.
headers/footers). Defaults to one file from the basename.javascripts
: list of javascripts to include (used for all html, incl.
headers/footers). Defaults to one file from the basename.pdfkit
: While a few PDFKit options are made available at the toplevel for
convenience, this key passes all options as-is to PDFKit.Example:
title: Foorever young
page-size: A4
orientation: landscape
grayscale: true
margin-left: 0
margin-right: 0
margin-top: 0
margin-bottom: 0
pdfkit:
print-media-type: true
main: foorever_young.html.slim
stylesheets:
- novel.css.less
- common.css
javascripts:
- page_numbering.js.coffee
footer: footer.html.slim
Filenames can be relative or absolute. When relative, they will be evaluated as based from the rpdf file.
Starting with 0.10, this functionality has been split into its own gem. Use Tilt::PDF::Rails
FAQs
Unknown package
We found that tilt-pdf demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.