Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
react-files
Advanced tools
A minimal, zero dependency, file input (dropzone) component for React.
If upgrading from version 1 or 2, see the Upgrading to Version 3 section below.
Install using npm or yarn. Requires React 16.8+.
npm install react-files --save
import React from 'react'
import Files from 'react-files'
const FileDropzone = () => {
const handleChange = (files) => {
console.log(files)
}
const handleError = (error, file) => {
console.log('error code ' + error.code + ': ' + error.message)
}
return (
<div className="files">
<Files
className='files-dropzone'
onChange={handleChange}
onError={handleError}
accepts={['image/png', '.pdf', 'audio/*']}
multiple
maxFileSize={10000000}
minFileSize={0}
clickable>
Drop files here or click to upload
</Files>
</div>
)
}
Most of the changes made to version 3 are internal, but there are some notable and breaking changes:
react-files
no longer manages state internally to track files that have been uploaded to a file list. This can be achieved quite simply however - please refer to the ListWithUpload
example.dropActiveClassName
prop has been renamed to dragActiveClassName
.div
element. No more default values for className
or dragActiveClassName
props.RenderProps
example.For a full list of changes, please checkout the v3.0.0 release changelog or the corresponding pull request.
onChange(files)
- Function
Perform work on files added when submit is clicked.
onError(error, file)
- Function
error.code
- Numbererror.message
- StringPerform work or notify the user when an error occurs.
Error codes are:
accepts
- Array of String
Control what types of generic/specific MIME types or file extensions can be dropped/added.
See full list of MIME types here: http://www.iana.org/assignments/media-types/media-types.xhtml
Example:
accepts={['image/*', 'video/mp4', 'audio/*', '.pdf']}
multiple
- Boolean
Default: true
Allow multiple files
clickable
- Boolean
Default: true
Dropzone is clickable to open file browser. Disable for dropping only.
maxFiles
- Number
Default: Infinity
Maximum number of files allowed
maxFileSize
- Number
Default: Infinity
Maximum file size allowed (in bytes)
minFileSize
- Number
Default: 0
Minimum file size allowed (in bytes)
dragActiveClassName
- String
Class added to the Files component when user is actively hovering over the dropzone with files selected.
inputProps
- Object
Default: {}
Inject properties directly into the underlying HTML file
input. Useful for setting required
or overriding the style
attributes.
To run the examples locally, clone and install peer dependencies (React 16.8+)
git clone https://github.com/mother/react-files
npm install
npm i react react-dom
Then run the examples server:
npm run examples
Then visit http://localhost:8080/
MIT. Copyright (c) Mother Co. 2023
FAQs
A file input (dropzone) management component for React
The npm package react-files receives a total of 10,127 weekly downloads. As such, react-files popularity was classified as popular.
We found that react-files demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.