WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Mar 19, 2024

Full Spectrum File Uploads

Austin Gil

Are your file uploads vulnerable to memory exhaustion and payload spoofing? Move beyond basic HTML forms. Build secure, scalable pipelines using S3 storage and asynchronous malware scanning.

Pause
Mute Enter Fullscreen
#1 about 4 min

Native HTML and HTTP fundamentals for file uploads

Properly configuring HTTP post requests and multipart form data allows websites to send files natively without relying on scripts.

#2 about 5 min

Enhancing file upload user experience using vanilla JavaScript

Intercepting form submissions with JavaScript prevents disruptive page reloads while preserving progressive enhancement and accessibility fallbacks.

#3 about 5 min

Receiving and processing streaming file uploads in Node.js

Handling raw byte buffers manually exhausts server memory quickly, making streaming libraries essential for safely processing heavy uploads.

#4 about 9 min

Scaling persistent storage with S3 compatible object storage

Migrating from constrained local disks to dedicated object storage via signed URLs or proxy streams heavily reduces infrastructure costs.

#5 about 4 min

Decreasing global file latency using content delivery networks

Caching uploaded assets at the network edge avoids localized latency issues when serving media to a globally distributed audience.

#6 about 4 min

Securing uploads through filename sanitization and extension validation

Implementing basic validations for file names, maximum sizes, and content types mitigates rudimentary application vulnerabilities and reduces storage waste.

#7 about 7 min

Architecting asynchronous malware scanning for uploaded file contents

Decoupling malware scans into background database jobs prevents slow request cycles while actively protecting applications from malicious user payloads.

Matching moments

1:33 min

Scanning secure file uploads to prevent malware payloads

Chris Heilmann Chris Heilmann +3 · LIVE

5:03 min

Securing file upload features against path traversal

Sebastian Leuer Sebastian Leuer · World Congress 2024

34 sec

Handling binary file downloads through appropriate architectural layers

Gregor Bauer Gregor Bauer · World Congress 2024

2:39 min

Validating untrusted storage uploads with serverless cloud functions

Reinhard Kugler · LIVE

3:07 min

Managing heavy JavaScript and CSS resource payloads

Shem Magnezi Shem Magnezi · World Congress 2025

3:02 min

Uncovering hidden vulnerabilities and bloat in web ecosystems

Chris Heilmann Chris Heilmann +2 · LIVE

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
11 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
18 days ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
19 days ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
25 days ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail
6:16
26 days ago

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail
5:46
about 1 month ago

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

Related videos

Hack-Proof The Node.js runtime: The Mechanics and Defense of Path Traversal Attacks thumbnail
27:10
World Congress 2023 • about 3 years ago

Hack-Proof The Node.js runtime: The Mechanics and Defense of Path Traversal Attacks

Sonya Moisset

The Fundamentals of Online Video thumbnail
1:03:27
LIVE • about 6 years ago

The Fundamentals of Online Video

Phil Cluff

WeAreDevelopers LIVE - CSS is DOOMed thumbnail
59:11
LIVE • 6 months ago

WeAreDevelopers LIVE - CSS is DOOMed

Chris Heilmann, Daniel Cranney, Justin Halsall, Christian Schaefer

WeAreDevelopers LIVE – Spicy Vanilla Web, CSS Magic & More thumbnail
59:40
LIVE • 11 months ago

WeAreDevelopers LIVE – Spicy Vanilla Web, CSS Magic & More

Chris Heilmann, Daniel Cranney, Peter Kröner

Security in modern Web Applications - OWASP to the rescue! thumbnail
26:59
World Congress 2023 • about 3 years ago

Security in modern Web Applications - OWASP to the rescue!

Jakub Andrzejewski

Web APIs you might not know about thumbnail
43:53
JS Congress • almost 5 years ago

Web APIs you might not know about

Sasha Shynkevich

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.