
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
github.com/yfix/jquery-file-upload
File Upload widget with multiple file selection, drag&drop support, progress bars, validation and preview images, audio and video for jQuery.
Supports cross-domain, chunked and resumable file uploads and client-side image resizing. Works with any server-side platform (PHP, Python, Ruby on Rails, Java, Node.js, Go etc.) that supports standard HTML form file uploads.
Support Forum
Support requests and general discussions about the File Upload plugin can be posted to the official
Support Forum.
If your question is not directly related to the File Upload plugin, you might have a better chance to get a reply by posting to Stack Overflow.
Bugs and Feature requests
Bugs and Feature requests can be reported using the issues tracker.
Please read the issue guidelines before posting.
The jQuery UI widget factory is a requirement for the basic File Upload plugin, but very lightweight without any other dependencies from the jQuery UI suite.
The jQuery Iframe Transport is required for browsers without XHR file upload support.
The JavaScript Templates engine is used to render the selected and uploaded files for the Basic Plus UI and jQuery UI versions.
The JavaScript Load Image library and JavaScript Canvas to Blob polyfill are required for the image previews and resizing functionality.
The blueimp Gallery is used to display the uploaded images in a lightbox.
The user interface of all versions except the jQuery UI version is built with Twitter's Bootstrap framework and icons from Glyphicons.
Cross-domain File Uploads using the Iframe Transport plugin require a redirect back to the origin server to retrieve the upload results. The example implementation makes use of result.html as a static redirect page for the origin server.
The repository also includes the jQuery XDomainRequest Transport plugin, which enables limited cross-domain AJAX requests in Microsoft Internet Explorer 8 and 9 (IE 10 supports cross-domain XHR requests).
The XDomainRequest object allows GET and POST requests only and doesn't support file uploads. It is used on the Demo to delete uploaded files from the cross-domain demo file upload service.
The File Upload plugin is regularly tested with the latest browser versions and supports the following minimal versions:
The File Upload plugin has been tested with and supports the following mobile browsers:
For a detailed overview of the features supported by each browser version please have a look at the Extended browser support information.
Released under the MIT license.
jQuery File Upload is free software, but you can donate to support the developer, Sebastian Tschan:
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.