Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@wordpress/media-utils
Advanced tools
The media utils package provides a set of artifacts to abstract media functionality that may be useful in situations where there is a need to deal with media uploads or with the media library, e.g., artifacts that extend or implement a block-editor. This package is meant to be used by the WordPress core. It may not work as expected outside WordPress usages.
Install the module
npm install @wordpress/media-utils --save
This package assumes that your code will run in an ES2015+ environment. If you're using an environment that has limited or no support for such language features and APIs, you should include the polyfill shipped in @wordpress/babel-preset-default
in your code.
Undocumented declaration.
Undocumented declaration.
Private @wordpress/media-utils APIs.
Undocumented declaration.
Transforms an attachment object from the REST API shape into the shape expected by the block editor and other consumers.
Parameters
RestAttachment
: REST API attachment object.Upload a media file when the file upload button is activated or when adding a file to the editor via drag & drop.
Parameters
UploadMediaArgs
: Parameters object passed to the function.UploadMediaArgs[ 'allowedTypes' ]
: Array with the types of media that can be uploaded, if unset all types are allowed.UploadMediaArgs[ 'additionalData' ]
: Additional data to include in the request.UploadMediaArgs[ 'filesList' ]
: List of files.UploadMediaArgs[ 'maxUploadFileSize' ]
: Maximum upload size in bytes allowed for the site.UploadMediaArgs[ 'onError' ]
: Function called when an error happens.UploadMediaArgs[ 'onFileChange' ]
: Function called each time a file or a temporary representation of the file is available.UploadMediaArgs[ 'wpAllowedMimeTypes' ]
: List of allowed mime types and file extensions.UploadMediaArgs[ 'signal' ]
: Abort signal.Verifies whether the file is within the file upload size limits for the site.
Parameters
File
: File object.number
: Maximum upload size in bytes allowed for the site.Verifies if the caller (e.g. a block) supports this mime type.
Parameters
File
: File object.string[]
: List of allowed mime types.Verifies if the user is allowed to upload this mime type.
Parameters
File
: File object.Record< string, string > | null
: List of allowed mime types and file extensions.Media upload util is a function that allows the invokers to upload files to the WordPress media library.
As an example, provided that myFiles
is an array of file objects, handleFileChange
on onFileChange is a function that receives an array of objects containing the description of WordPress media items and handleFileError
is a function that receives an object describing a possible error, the following code uploads a file to the WordPress media library:
wp.mediaUtils.utils.uploadMedia( {
filesList: myFiles,
onFileChange: handleFileChange,
onError: handleFileError,
} );
The following code uploads a file named foo.txt with foo as content to the media library and alerts its URL:
wp.mediaUtils.utils.uploadMedia( {
filesList: [ new File( [ 'foo' ], 'foo.txt', { type: 'text/plain' } ) ],
onFileChange: ( [ fileObj ] ) => alert( fileObj.url ),
onError: console.error,
} );
Beware that first onFileChange is called with temporary blob URLs and then with the final URL's this allows to show the result in an optimistic UI as if the upload was already completed. E.g.: when uploading an image, one can show the image right away in the UI even before the upload is complete.
Media upload component provides a UI button that allows users to open the WordPress media library. It is normally used in conjunction with the filter editor.MediaUpload
.
The component follows the interface specified in https://github.com/WordPress/gutenberg/blob/HEAD/packages/block-editor/src/components/media-upload/README.md, and more details regarding its usage can be checked there.
This is an individual package that's part of the Gutenberg project. The project is organized as a monorepo. It's made up of multiple self-contained software packages, each with a specific purpose. The packages in this monorepo are published to npm and used by WordPress as well as other software projects.
To find out more about contributing to this package or Gutenberg as a whole, please read the project's main contributor guide.
FAQs
WordPress Media Upload Utils.
We found that @wordpress/media-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 23 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.