Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@rpldy/upload-button
Advanced tools
Upload button component and asUploadButton HOC
Initiate file upload by opening the browser's native file selection dialog.
Buttons can use different configuration overrides that supersede the options passed to the parent Uploady.
Note: Some options cannot be overridden by the button. For example, any prop that influences the file input directly (such as 'multiple')
The best place to get started is at our: React-Uploady Documentation Website
#Yarn:
$ yarn add @rpldy/uploady @rpldy/upload-button
#NPM:
$ npm i @rpldy/uploady @rpldy/upload-button
Name (* = mandatory) | Type | Default | Description |
---|---|---|---|
id | string | undefined | id attribute to pass to the button element |
text | string | "Upload" | the button text (in case no children passed) |
className | string | undefined | the class attribute to pass to the button element |
children | React.Node | undefined | child element(s) to render inside the button (replaces text) |
extraProps | Object | undefined | any other props to pass to the button component (with spread) |
ref | React ref | undefined | will be passed to the button element to acquire a ref |
onClick | MouseEventHandler | undefined | function to handle button click (called after showing the system's file selection dialog) |
In addition, most UploadOptions props can be passed to UploadButton. In order to override configuration passed to the parent Uploady component. See Uploady documentation for detailed list of upload options.
The following guide shows how different upload buttons may use different upload options.
This examples shows how you add Uploady and UploadButton to your app. This is all it takes to get file uploading to work in your React app.
import React from "react";
import Uploady from "@rpldy/uploady";
import UploadButton from "@rpldy/upload-button";
const App = () => (<Uploady
destination={{ url: "https://my-server/upload" }}>
<UploadButton/>
</Uploady>);
In case you want to use your own component as the upload trigger, use the asUploadButton HOC:
import React, { forwardRef } from "react";
import Uploady from "@rpldy/uploady";
import { asUploadButton } from "@rpldy/upload-button";
const DivUploadButton = asUploadButton(forwardRef(
(props, ref) =>
<div {...props} style={{ cursor: "pointer" }}>
DIV Upload Button
</div>
));
const App = () => (<Uploady
destination={{ url: "https://my-server/upload" }}>
<DivUploadButton/>
</Uploady>);
Note: asUploadButton makes it possible to gain access to the underlying component with a ref. To support this, it passes along a ref to the component you provide it. For functional components, you'd need to wrap your component with React.forwardRef.
1.8.3 (2024-08-19)
[chunked-uploady]
- fix: typings for chunk events hooks, to accept promise return type. Fix for #726ci
- parallelize e2e test runs and create weights file based on timings for optimized future runsFAQs
upload button component and asUploadButton HOC
The npm package @rpldy/upload-button receives a total of 6,349 weekly downloads. As such, @rpldy/upload-button popularity was classified as popular.
We found that @rpldy/upload-button demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.