He Xuan is participating 2021 OSC China Open Source Project Selection , please vote for it!
He Yuzai 2021 OSC China Open Source Project Selection {{projectVoteCount} has been obtained in, please vote for it!
2021 OSC China Open Source Project Selection It is in hot progress. Come and vote for your favorite open source project!
2021 OSC China Open Source Project Selection>>> Midfield Review
He 蹏 won the 2021 OSC China Open Source Project Selection "The Best Popularity Project" !
Authorization Agreement MIT
development language HTML/CSS View source code »
operating system Cross platform
Software type Open source software
Open source organizations nothing
region domestic
deliverer Alias_Travis
intended for unknown
Recording time 2021-12-28

Software Introduction

H è t í is a typesetting style enhancement designed for Chinese content display. It is based on the common Chinese typesetting standard, which can bring better article reading experience to the readers of the website.

Preview: https://sivan.github.io/heti/

Main characteristics:

  • Layout that fits the grid;
  • Full label style beautification;
  • Preset the style of ancient prose and poetry;
  • Preset multiple typesetting styles (interline notes, multiple columns, vertical layout, etc.);
  • Multiple preset font families (desktop only);
  • Simplified/Traditional Chinese support;
  • Adaptive dark mode;
  • Beautify the mixed typesetting of Chinese and Western languages, and no longer use the blank space 👏 (based on JavaScript script);
  • Full angle punctuation extrusion (based on JavaScript script);
  • Compatible normalize.css CSS Reset Common styles such as reset;
  • Mobile terminal support;
  • ……

usage method

  1. On the page's <head> Introduced in the label heti.css File:
     <link rel="stylesheet" href="//unpkg.com/heti/umd/heti.min.css">
  2. Add on the container element to be used class="heti" The class name of can be:
     <article class="entry heti"> <h1>My World View</h1> <p>The life of the rich is so simple and boring</p> …… </article>
  3. Use enhanced scripts (optional):
     <script src="//unpkg.com/heti/umd/heti-addon.min.js"></script> <script> const heti = new Heti('.heti'); heti.autoSpacing(); //  Automatic mixed Chinese and Western language beautification and punctuation extrusion </script>

Under development

  • Adaptive Dark Mode

  • Punctuation extrusion

  • Mixed Chinese and Western languages

  • Traditional Chinese support

  • Poetry format

  • Interline layout

Expand to read the full text

code

Gitee index of is
exceed Items for

comment

Click to join the discussion 🔥 (6) Post and join the discussion 🔥
No content temporarily
{{o.pubDate | formatDate}}

{{formatAllHtml(o.title)}}

{{parseInt(o.replyCount) | bigNumberTransform}}
{{parseInt(o.viewCount) | bigNumberTransform}}
No more
No content temporarily
Issued a question and answer
{{o.pubDate | formatDate}}

{{formatAllHtml(o.title)}}

{{parseInt(o.replyCount) | bigNumberTransform}}
{{parseInt(o.viewCount) | bigNumberTransform}}
No more
No content temporarily
Npm Node tar Post Link Vulnerability
Node tar is a software package for file compression/decompression. There is a post link vulnerability in the Npm node tar, which originates from the product's failure to validate special characters effectively. An attacker can use this vulnerability to create malicious files in other paths.
CVE-2021-37712 MPS-2021-28488
2022-08-05 15:22
Node tar path traversal vulnerability
path traversal
Node tar is a software package for file compression/decompression. There is a path traversal vulnerability in npm node tar, which originates from the vulnerability of arbitrary file creation overwrite and arbitrary code execution in the npm package "tar" (also known as node tar) before 4.4.18, 5.0.10 and 6.1.9. An attacker can use this vulnerability to access locations outside of restricted directories.
CVE-2021-37713 MPS-2021-28489
2022-08-05 15:22
Trim newlines security vulnerability
Denial of Service
Trim newlines is an npm package that modifies line breaks. There is a security vulnerability in trim newlines, which is due to the related problem with the. end() method applied to Node.js in 3.0.1, 4.0.1 and earlier versions.
CVE-2021-33623 MPS-2021-7398
2022-08-05 15:22
Stylint has ReDoS vulnerability
ReDoS
Stylelint is a lint that helps you avoid errors and enforce conventions in styles. The affected version of this package is vulnerable to regular expression denial of service (ReDoS) attacks.
MPS-2022-14060
2022-08-05 15:22
Tar has a denial of service vulnerability
Denial of Service
Tar is a full-featured Tar for Node.js. The affected version of this package is vulnerable to regular expression denial of service (ReDoS) attacks.
MPS-2022-14081
2022-08-05 15:22
Ajv Input Validation Error Vulnerability
Improper input validation
An input validation error vulnerability exists in the ajv. validate() function in Ajv 6.12.2. An attacker can use this vulnerability to execute code or cause a denial of service.
CVE-2020-15366 MPS-2020-10525
2022-08-05 15:22
Sass Node sass Trust Management Vulnerability
Improper certificate verification
Sass Node sass is a C++based code library of Gogo (Sass) team that supports the interaction between Node and LibSass. There is a security vulnerability in node sass 2.0.0 to 4.14.1. The vulnerability originates from the fact that certificate verification will be disabled.
CVE-2020-24025 MPS-2021-0364
2022-08-05 15:22
Npm Node tar Post Link Vulnerability
Node tar is a software package for file compression/decompression. There is a post link vulnerability in the Npm node tar, which originates from the product's failure to validate special characters effectively. An attacker can use this vulnerability to create malicious files in other paths.
CVE-2021-37701 MPS-2021-28486
2022-08-05 15:22
No more
Loading failed, please refresh the page
Click to load more
Loading
next page
six comment
eighty-three Collection
 OSCHINA
Log in to view more high-quality content
 Back to top
Top