0.0.6 • Published 7 years ago
colour-pickr v0.0.6
colour-pickr
React Color Picker
CTF
This is an example of an extremely dangerous method to penetrate a
web app: Typosquatting
Basically, a perfectly valid repository could contain malicious
code that AND valid code.
If a node developer in this case were to npm install `colour-pickr`
instead of `color-picker` they would pull in a repository I made in
20 minutes with whatever code I wanted to be run on their computers.
A real-life example where this type of vulnerability affected a ton
of codebases across the javascript landscape can be found here:
https://schneider.dev/blog/event-stream-vulnerability-explained/
Here is the md5 for your ctf: 6266dfde41373fc18e10429e05be946aBrowser Support
![]() | ![]() | ![]() | ![]() | ![]() | ![]() |
|---|---|---|---|---|---|
| Chrome 31.0+ ✔ | Edge 12.0+ ✔ | Firefox 31.0+ ✔ | IE 10+ ✔ | Opera 30.0+ ✔ | Safari 7.0+ ✔ |
Screenshots
Development
npm install
npm startExample
online example: http://react-component.github.io/color-picker/
Feature
- support color mode RGB HSB HSL
install
Usage
var ColorPicker = require('colour-pickr');
var React = require('react');
var ReactDOM = require('react-dom');
ReactDOM.render(<ColorPicker />, container);API
ColorPicker.props
| name | type | default | description |
|---|---|---|---|
| align | Object: alignConfig of dom-align | popup 's align config | |
| alpha | Number | 100 | opacity of the color |
| animation | String | index.css support 'slide-up' | |
| children | Node | <span className='react-colorpicker-trigger'></span> | additional trigger appended to picker |
| className | String | '' | Aditional class to be added to component |
| color | String | #ff0000 | color board current background color |
| defaultAlpha | Number | 100 | opacity of the color |
| defaultColor | String | #ff0000 | color board current background color |
| enableAlpha | Boolean | true | enable alpha controls |
| getCalendarContainer | Function():Element | function(){return document.body;} | dom node where picker to be rendered into |
| mode | String | RGB | color mode, support mode 'RGB', 'HSB' or 'HSL' |
| onChange | Function | noop | when select color |
| onClose | Function | noop | when color picker popup close |
| onOpen | Function | noop | when color picker popup open |
| placement | String | topLeft | one of 'topLeft', 'topRight', 'bottomLeft', 'bottomRight' |
| transitionName | String | css class for animation |
ColorPicker.Panel.props
| name | type | default | description |
|---|---|---|---|
| alpha | Number | 100 | opacity of the color |
| className | String | '' | Aditional class to be added to component |
| color | String | #ff0000 | color board current background color |
| defaultAlpha | Number | 100 | opacity of the color |
| defaultColor | String | #ff0000 | color board current background color |
| enableAlpha | Boolean | true | enable alpha controls |
| mode | String | RGB | color mode, support mode 'RGB', 'HSB' or 'HSL' |
| onBlur | Function | when picker loose focus | |
| onChange | Function | when select color trigger | |
| onFocus | Function | when picker focus trigger | |
| style | Object | {} | root node CSS style |
License
colour-pickr is released under the MIT license.






