Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
jquery-fileuploads-rails4
Advanced tools
jQuery File Upload is a cross-browser javascript library for asynchronus Flash-free file uploading by Sebastian Tschan (@blueimp). This gem packages it for the asset pipeline in Rails.
You should see the original project page for reference & documentation. There are no instructions here on how to use the library itself.
Add a line to your Gemfile.
gem 'jquery.fileupload-rails'
Now you can require the javascript library in application.js:
//= require jquery.fileupload
Included (no need to require):
Example Rails application can be found in "demo" directory.
You can remove all dependencies of the plugin from you manifest. Before:
//= require jquery.ui
//= require jquery.iframe-transport
//= require jquery.fileupload
After:
//= require jquery.fileupload
If you downloaded jquery.ui assets into your project, delete them and use jquery-ui-rails gem instead.
1.11.0. Core 5.42.0.
1.10.1. Core 5.41.1.
1.10.0. Compatibility with new jQuery UI Rails 5.0 (jQuery UI 1.11).
1.9.0. Core 5.41.0.
1.8.1. Core 5.40.1.
1.8.0. Core 5.40.0, updated demo app.
1.7.0. Core 5.34.0.
1.6.1. Core 5.32.5, jQuery UI Rails 4 compatibility.
1.6.0. Core 5.32.2.
1.5.1. Core 5.31.
1.5.0. Core 5.30.
1.4.1. Core 5.28.8.
1.4.0. Core 5.28.4.
1.3.0. Core 5.26.
1.2.0. Core 5.21.1, demo instructions.
1.1.1. Core 5.19.4, jQuery UI 1.9, added licensing info.
1.0.0. Core 5.18.
Now rake task generates assets from official repo and adds dependencies automatically. That means you can just require jquery.fileupload, no extra requires needed.
0.1.2. Fixed CSS that makes SASS 3.2 raise an error on rake assets:precompile
0.1.1. Core 5.11.2, UI 6.9.1, minor gemspec change.
0.1.0. Core 5.9.0, UI 6.6.2, added readme.
0.0.1. Core 5.5.2, UI 5.1.1.
jQuery File Upload as well as this gem are released under the MIT license.
FAQs
Unknown package
We found that jquery-fileuploads-rails4 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.