WeAreDevelopers LIVE • Mar 19, 2024

Full Spectrum File Uploads

Austin Gil

Are your file uploads vulnerable to memory exhaustion and payload spoofing? Move beyond basic HTML forms. Build secure, scalable pipelines using S3 storage and asynchronous malware scanning.

Pause

Mute

Enter Fullscreen

#1 about 4 min

Native HTML and HTTP fundamentals for file uploads

Properly configuring HTTP post requests and multipart form data allows websites to send files natively without relying on scripts.

#2 about 5 min

Enhancing file upload user experience using vanilla JavaScript

Intercepting form submissions with JavaScript prevents disruptive page reloads while preserving progressive enhancement and accessibility fallbacks.

#3 about 5 min

Receiving and processing streaming file uploads in Node.js

Handling raw byte buffers manually exhausts server memory quickly, making streaming libraries essential for safely processing heavy uploads.

#4 about 9 min

Scaling persistent storage with S3 compatible object storage

Migrating from constrained local disks to dedicated object storage via signed URLs or proxy streams heavily reduces infrastructure costs.

#5 about 4 min

Decreasing global file latency using content delivery networks

Caching uploaded assets at the network edge avoids localized latency issues when serving media to a globally distributed audience.

#6 about 4 min

Securing uploads through filename sanitization and extension validation

Implementing basic validations for file names, maximum sizes, and content types mitigates rudimentary application vulnerabilities and reduces storage waste.

#7 about 7 min

Architecting asynchronous malware scanning for uploaded file contents

Decoupling malware scans into background database jobs prevents slow request cycles while actively protecting applications from malicious user payloads.

Matching moments

1:33 min

Scanning secure file uploads to prevent malware payloads

Chris Heilmann +3 · LIVE

5:03 min

Securing file upload features against path traversal

Sebastian Leuer

Sebastian Leuer · World Congress 2024

34 sec

Handling binary file downloads through appropriate architectural layers

Gregor Bauer

Gregor Bauer · World Congress 2024

2:39 min

Validating untrusted storage uploads with serverless cloud functions

Reinhard Kugler · LIVE

3:07 min

Managing heavy JavaScript and CSS resource payloads

Shem Magnezi

Shem Magnezi · World Congress 2025

3:02 min

Uncovering hidden vulnerabilities and bloat in web ecosystems

Chris Heilmann +2 · LIVE

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

Upcoming sessions on this topic

World Congress 2026 North America

September 24, 2026 · 16:50–17:20

Stage 7

File Systems Are the New Primitive for AI Agents

Andrew Wong

Sr. Developer Relations Engineer at Box

Andrew Wong

World Congress 2026 North America

September 23, 2026 · 15:45–17:45

Stage 10

Securing the Agentic Stack: Docker Hardened Images and Supply Chain Security

Ajeet Raina

Developer Advocate at Docker

Ajeet Raina

World Congress 2026 North America

September 24, 2026 · 11:40–12:10

Stage 3

Stop Running Mystery Meat in Production

Jeroen van Erp

Technology Advocate @ SUSE

Jeroen van Erp

World Congress 2026 North America

September 25, 2026 · 16:15–16:25

Outdoor Stage

Silent Execution: Defending Against Install-Time Supply Chain Attacks

Chris DeMars

Senior Developer Advocate at TuxCare

Chris DeMars

World Congress 2026 North America

September 25, 2026 · 15:00–17:00

Stage 12

Secure development from pull request to production with GitHub

Sam Jarvinen

Senior Solutions Engineer, GitHub

Sam Jarvinen

World Congress 2026 North America

September 24, 2026 · 13:30–15:30

Stage 12

GitHub Actions

Austen Stone

Senior Field Actions Specialist, GitHub

Austen Stone

Related videos

Hack-Proof The Node.js runtime: The Mechanics and Defense of Path Traversal Attacks thumbnail

World Congress 2023 • almost 3 years ago

Hack-Proof The Node.js runtime: The Mechanics and Defense of Path Traversal Attacks

Sonya Moisset

The Fundamentals of Online Video thumbnail

LIVE • about 6 years ago

The Fundamentals of Online Video

Phil Cluff

WeAreDevelopers LIVE - CSS is DOOMed thumbnail

LIVE • 6 months ago

WeAreDevelopers LIVE - CSS is DOOMed

Chris Heilmann, Daniel Cranney, Justin Halsall, Christian Schaefer

WeAreDevelopers LIVE – Spicy Vanilla Web, CSS Magic & More thumbnail

LIVE • 11 months ago

WeAreDevelopers LIVE – Spicy Vanilla Web, CSS Magic & More

Chris Heilmann, Daniel Cranney, Peter Kröner

Security in modern Web Applications - OWASP to the rescue! thumbnail

World Congress 2023 • almost 3 years ago

Security in modern Web Applications - OWASP to the rescue!

Jakub Andrzejewski

Web APIs you might not know about thumbnail

JS Congress • almost 5 years ago

Web APIs you might not know about

Sasha Shynkevich

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

about 4 years ago

Walking Into The Era of Supply Chain Risks

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

almost 2 years ago

Dev Digest 138 - Are you secure about this?

DC

Daniel Cranney

HTML Media Elements and How to Use Them: <video> and <audio>

If you’ve read the WeAreDevelopers Magazine before, you’ll know we’re vocal supporters of the web platform, and of sharing the power of native HTML elements. This time, we’re taking a closer look a...

7 months ago

A wireframe diagram of a video player

CH

Chris Heilmann

Dev Digest 139 - Soft and hard queries

News and ArticlesLet's start with Amelia Wattenberger's excellent essay Bridging the hard and the soft talking about humans and data. Do you sometimes also miss aspects of the early web like a lack...

almost 2 years ago

Dev Digest 139 - Soft and hard queries

From learning to earning

Jobs that call for the skills explored in this talk.

25 days ago • Verified

Senior Supply Chain Security Engineer

Expert Remote Linux Kubernetes

Frontend Engineer

Berlin, Germany

Expert €80k–140k NestJS ReactJS TypeScript

Junior Frontend Engineer

Berlin, Germany

Starter €60k–75k NestJS ReactJS Backend

about 1 month ago • Verified

Founding Developer Advocate

San Francisco, United States

Experienced $150k–190k Remote GIT Bash Linux

25 days ago • Verified

Principal Software Engineer, Docker Hardened Images

Expert Remote Kubernetes

25 days ago • Verified

Senior Principal Software Engineer, Docker and Ecosystem

Seattle, United States

Expert Remote Cloud (AWS/Google/Azure)