Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
progress_upload_field
Advanced tools
progress_upload_field provides a FormHelper function to display all necessary divtags and a javascript for progress-bar display while uploading files.
Gemfile
Add the following line
gem 'progress_upload_field', '~> 0.0.1'
application.js
Add the following line
//= require progress_upload_field
application.css
Add the following line
@import "progress.css.scss";
Use the gem in your view
Here an example how to use it with HAML. Obviosly it works with html.erm too
= form_for([@posting,@attachment], :html => { :multipart => true, :name => 'new_attachment' } ) do |f|
.field
=f.label :file
=f.file_field :file, :onchange => "fileSelected('new_attachment','attachment_file','#{posting_attachments_path(@posting)}');"
.field
=f.label :submit
=f.submit t(:submit), :onclick => "uploadFile('new_attachment'); return false;"
=progress_upload_field('attachment_file')
The keywords are 'new_attachment' and 'attachment_file'.
You can choose any names you want.
The name of the form should be provided at :onclick => "uploadFile('your_forms_name')"
The name of the model + the name of the upload field should be provided at progress_upload_field('your_model_your_field')
Copyright (c) 2011 Andi Altendorfer. See LICENSE.txt for further details.
FAQs
Unknown package
We found that progress_upload_field demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.