Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
express-file-manager
Advanced tools
This is an Express middleware that provides a nice UI for editing files on the web.
This is an Express middleware that provides a nice UI for editing files on the web.
Text files are opened/edited using Ace. The directory browser and image preview pages can accept drag-and-drop, and will upload files.
This is intended for use as an "admin interface". There is no security in this module - if you don't want the entire internet to be able to modify your folder, you should put in access control for the relevant subpaths;
var fileManager = require('express-file-manager');
app.use('/filemanager', fileManager(directory, options));
options.textExtensions
- a list of file extensions to be considered "text"options.textTypes
- a list of MIME types (string match or RegExp) to be considered "text".By default, .gitignore
files, and anything with a mime types like */json
, */*+json
, */xml
, */*+xml
and */javascript
are considered text. MIME types that start with text/*
are always considered text.
This project is MIT-licensed.
This package includes MIT-licensed content from open-iconic and Ace.
FAQs
This is an Express middleware that provides a nice UI for editing files on the web.
The npm package express-file-manager receives a total of 45 weekly downloads. As such, express-file-manager popularity was classified as not popular.
We found that express-file-manager demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.