Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
attr-accept
Advanced tools
The attr-accept package is designed to provide functionality for checking if a file meets certain criteria specified through file attributes. This is particularly useful in scenarios where file uploads need to be validated based on file type, name, or other attributes before being processed or accepted. It's commonly used in web development projects to enhance the file upload feature by filtering out unacceptable files based on their attributes.
File Type Validation
This feature allows developers to validate the type of the file by specifying a MIME type pattern. In the code sample, the function `accepts` is used to check if a file named 'example.jpg' with the MIME type 'image/jpeg' matches the specified pattern 'image/*'. This is useful for ensuring that only files of a certain type are processed.
const accepts = require('attr-accept');
const file = {
name: 'example.jpg',
type: 'image/jpeg'
};
const accepted = accepts(file, 'image/*');
console.log(accepted); // true or false
File Extension Validation
This feature enables the validation of files based on their extension. The provided code demonstrates how to use the `accepts` function to verify if a file with the name 'example.pdf' and the type 'application/pdf' has a '.pdf' extension. This can be particularly useful for applications that only need to accept files with specific extensions.
const accepts = require('attr-accept');
const file = {
name: 'example.pdf',
type: 'application/pdf'
};
const accepted = accepts(file, '.pdf');
console.log(accepted); // true or false
The 'file-type' package is used to detect the file type of a Buffer/Uint8Array/ArrayBuffer. Unlike attr-accept, which matches files based on patterns or extensions provided by the developer, 'file-type' inspects the file content to determine its MIME type. This can be more reliable in cases where file extensions are incorrect or missing.
The 'mime-types' package allows for the lookup of MIME types based on file extensions and vice versa. While attr-accept is used for validating files against specific patterns or extensions, 'mime-types' is more focused on the association between file extensions and their corresponding MIME types, providing a way to retrieve one from the other.
JavaScript implementation of the "accept" attribute for HTML5 <input type="file">
See https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/file#accept for more information.
npm install --save attr-accept
var accept = require('attr-accept');
accept({
name: 'my file.png',
type: 'image/png'
}, 'image/*') // => true
accept({
name: 'my file.json',
type: 'application/json'
}, 'image/*') // => false
accept({
name: 'my file.srt',
type: ''
}, '.srt') // => true
You can also pass multiple mime types as a comma delimited string or array.
accept({
name: 'my file.json',
type: 'application/json'
}, 'application/json,video/*') // => true
accept({
name: 'my file.json',
type: 'application/json'
}, ['application/json', 'video/*']) // => true
FAQs
JavaScript implementation of the "accept" attribute for HTML5
The npm package attr-accept receives a total of 2,500,551 weekly downloads. As such, attr-accept popularity was classified as popular.
We found that attr-accept demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.