yuda-lyu / wsemi

A support package for web developer.

wsemi

A support package for web developer.

Documentation

To view documentation or get support, visit docs.

Example

To view some examples for more understanding, visit examples:

str2aes and aes2str: ex-str2aes-aes2str.html [source code]

timeTZ2expire and timeTZ2past: ex-timeTZ2expire-timeTZ2past.html [source code]

color converter: ex-colorConverter.html [source code]

blob2b64: ex-blob2b64.html [source code]

domTooltip: ex-domTooltip.html [source code]

domShowImages: ex-domShowImages.html [source code]

domShowImagesDyn[dynamic import]: ex-domShowImagesDyn.html [source code]

domConvertToPic: ex-domConvertToPic.html [source code]

domConvertToPicDyn[dynamic import]: ex-domConvertToPicDyn.html [source code]

domRenderMarkdownMind: ex-domRenderMarkdownMind.html [source code]

domRenderMarkdownMindDyn[dynamic import]: ex-domRenderMarkdownMindDyn.html [source code]

domCompareText: ex-domCompareText.html [source code]

domCompareTextDyn[dynamic import]: ex-domCompareTextDyn.html [source code]

domScrollIntoView: ex-domScrollIntoView.html [source code]

domScrollTo: ex-domScrollTo.html [source code]

domShowInputAndGetFiles: ex-domShowInputAndGetFiles.html [source code]

domDropFiles: ex-domDropFiles.html [source code]

domDrag: ex-domDrag.html [source code]

domIsVisible: ex-domIsVisible.html [source code]

domRipple: ex-domRipple.html [source code]

strFindFuzz: ex-strFindFuzz.html [source code]

strFindFuzzDyn[dynamic import]: ex-strFindFuzzDyn.html [source code]

obj2u8arr & u8arr2obj: ex-obj2u8arr-u8arr2obj.html [source code]

getUserAgent: ex-getUserAgent.html [source code]

getUserAgentDyn[dynamic import]: ex-getUserAgentDyn.html [source code]

xss: ex-clearXSS.html [source code]

openlink: ex-openLink.html [source code]

xlsx: ex-xlsx.html [source code]

xlsx[dynamic import]: ex-xlsxDyn [source code]

html2pic: ex-html2pic.html [source code]

html2picDyn[dynamic import]: ex-html2picDyn.html [source code]

html2str: ex-html2str.html [source code]

html2strDyn[dynamic import]: ex-html2strDyn.html [source code]

execPyodide: ex-execPyodide.html [source code]

execPyodideDyn[dynamic import]: ex-execPyodideDyn.html [source code]

ocr: ex-ocr.html [source code]

ocrDyn[dynamic import]: ex-ocrDyn.html [source code]

Installation

Using npm(ES6 module):

Note: wsemi is mainly dependent on lodash-es, eventemitter3, crypto-js, chokidar, dayjs, diff, fuse.js, decimal.js,ua-parser-js, xss, xlsx, tippy.js, htmlparser, tesseract.js and pyodide.

npm i wsemi

In a browser(UMD module):

Note: umd file includes with lodash-es, crypto-js and tippy.js.

[Optional] Add script with nomodule for IE11.

<script nomodule src="https://cdn.jsdelivr.net/npm/@babel/[email protected]/dist/polyfill.min.js"></script>

[Optional] Add script for dayjs(or moment).

Note: Include script when using some function of time. If include moment, need set moment to window.dayjs (ex: window.dayjs = moment), and put it before include script for wsemi.umd.js.

<script src="https://cdn.jsdelivr.net/npm/[email protected]/dayjs.min.js"></script>

or

<script src="https://cdn.jsdelivr.net/npm/[email protected]/moment.min.js"></script>
<script>
  window.dayjs = moment
</script>

[Optional] Add script for fuse.js.

Note: Include script when using strFindFuzz function, and don't include script when using strFindFuzzDyn function.

<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/fuse.min.js"></script>

[Optional] Add script for ua-parser-js.

Note: Include script when using getUserAgent function, and don't include script when using getUserAgentDyn function.

<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/ua-parser.min.js"></script>

[Optional] Add script for xss.

Note: Include script when using clearXSS function.

<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/xss.min.js"></script>

[Optional] Add script for xlsx.

Note: Include script when using downloadExcelFileFromData or getDataFromExcelFileU8Arr function, and don't include script when using downloadExcelFileFromDataDyn or getDataFromExcelFileU8ArrDyn function.

<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/xlsx.full.min.js"></script>

[Optional] Add link and script for viewerjs.

Note: Include script when using domShowImages function, and don't include script when using domShowImagesDyn function.

<link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/viewer.min.css" rel="stylesheet">
<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/viewer.min.js"></script>

[Optional] Add script for html2canvas.

Note: Include script when using html2pic function, and don't include script when using html2picDyn function. Use canvg with nomodule for IE11.

<script nomodule src="https://cdn.jsdelivr.net/npm/[email protected]/lib/umd.js"></script>
<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/html2canvas.min.js"></script>

[Optional] Add script for html-to-image. It does not support IE11.

Note: Include script when using domConvertToPic function, and don't include script when using domConvertToPicDyn function. html-to-image does not support IE11 and Safari.

<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/html-to-image.js"></script>

[Optional] Add script for markmap. It does not support IE11.

Note: Include script when using domRenderMarkdownMind function, and don't include script when using domRenderMarkdownMindDyn function. markmap does not support IE11 and Safari.

<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/d3.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/index.min.js"></script>
<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/browser/index.min.js"></script>

[Optional] Add link and script for diff2html. It does not support IE11.

Note: Include script when using domCompareText function, and don't include script when using domCompareTextDyn function.

<link href="https://cdn.jsdelivr.net/npm/[email protected]/bundles/css/diff2html.min.css" rel="stylesheet" />
<script src="https://cdn.jsdelivr.net/npm/[email protected]/bundles/js/diff2html.min.js"></script>

[Optional] Add script for htmlparser.

Note: Include script when using html2str function, and don't include script when using html2strDyn function.

<script src="https://cdn.jsdelivr.net/npm/[email protected]/lib/htmlparser.min.js"></script>

[Optional] Add script for pyodide. It does not support IE11.

Note: Include script when using execPyodide function, and don't include script when using execPyodideDyn function.

<script src="https://cdn.jsdelivr.net/pyodide/v0.23.4/full/pyodide.js"></script>

[Optional] Add script for tesseract.js. It does not support IE11.

Note: Include script when using ocr function, and don't include script when using ocrDyn function.

<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/tesseract.min.js"></script>

[Necessary] Add script for wsemi.

<script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/wsemi.umd.js"></script>

wsemi's Issues

同学，您这个项目引入了719个开源组件，存在4个漏洞，辛苦升级一下

检测到 yuda-lyu/wsemi 一共引入了719个开源组件，存在4个漏洞

漏洞标题：nodejs 资源管理错误漏洞
漏洞编号：CVE-2020-28469
漏洞描述：nodejs是是一个基于ChromeV8引擎的JavaScript运行环境通过对Chromev8引擎进行了封装以及使用事件驱动和非阻塞IO的应用让Javascript开发高性能的后台应用成为了可能。
nodejs-glob-parent 存在安全漏洞，该漏洞源于正则表达式拒绝服务。
影响范围：(∞, 5.1.2)
最小修复版本：5.1.2
缺陷组件引入路径：[email protected]>[email protected]>[email protected]>[email protected]
[email protected]>[email protected]>[email protected]>[email protected]>[email protected]
[email protected]>[email protected]>@babel/[email protected]>@nicolo-ribaudo/[email protected]>[email protected]
[email protected]>[email protected]>@babel/[email protected]>[email protected]>[email protected]

另外还有4个漏洞，详细报告：https://mofeisec.com/jr?p=n645da

bump vulnerable ua-parser-js version

There's a malicious ua-parser-js NPM takeover, this PR bumps ua-parser-js version to the safe 0.7.30.

Security advisory: GHSA-pjwm-rvh2-c87w
GH thread: faisalman/ua-parser-js#536

PR: #1