WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Mar 19, 2024

Full Spectrum File Uploads

Austin Gil

Are your file uploads vulnerable to memory exhaustion and payload spoofing? Move beyond basic HTML forms. Build secure, scalable pipelines using S3 storage and asynchronous malware scanning.

Pause
Mute Enter Fullscreen
#1 about 4 min

Native HTML and HTTP fundamentals for file uploads

Properly configuring HTTP post requests and multipart form data allows websites to send files natively without relying on scripts.

#2 about 5 min

Enhancing file upload user experience using vanilla JavaScript

Intercepting form submissions with JavaScript prevents disruptive page reloads while preserving progressive enhancement and accessibility fallbacks.

#3 about 5 min

Receiving and processing streaming file uploads in Node.js

Handling raw byte buffers manually exhausts server memory quickly, making streaming libraries essential for safely processing heavy uploads.

#4 about 9 min

Scaling persistent storage with S3 compatible object storage

Migrating from constrained local disks to dedicated object storage via signed URLs or proxy streams heavily reduces infrastructure costs.

#5 about 4 min

Decreasing global file latency using content delivery networks

Caching uploaded assets at the network edge avoids localized latency issues when serving media to a globally distributed audience.

#6 about 4 min

Securing uploads through filename sanitization and extension validation

Implementing basic validations for file names, maximum sizes, and content types mitigates rudimentary application vulnerabilities and reduces storage waste.

#7 about 7 min

Architecting asynchronous malware scanning for uploaded file contents

Decoupling malware scans into background database jobs prevents slow request cycles while actively protecting applications from malicious user payloads.

Matching moments

1:33 min

Scanning secure file uploads to prevent malware payloads

Chris Heilmann +3 · LIVE

5:03 min

Securing file upload features against path traversal

Sebastian Leuer Sebastian Leuer · WWC 2024

34 sec

Handling binary file downloads through appropriate architectural layers

Gregor Bauer Gregor Bauer · WWC 2024

2:39 min

Validating untrusted storage uploads with serverless cloud functions

Reinhard Kugler · LIVE

3:07 min

Managing heavy JavaScript and CSS resource payloads

Shem Magnezi Shem Magnezi · WWC 2025

3:23 min

Answering audience questions on application testing and browser adoption

Rowdy Rabouw Rowdy Rabouw · WWC 2021

More from WeAreDevelopers LIVE

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz thumbnail
5:43
5 days ago

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Node and Package Security thumbnail
1:08:30
5 days ago

WeAreDevelopers LIVE - Node and Package Security

Chris Heilmann, Daniel Cranney, Zbyszek Tenerowicz

WeAreDevelopers LIVE - Streaming HTML thumbnail
1:10:26
12 days ago

WeAreDevelopers LIVE - Streaming HTML

Chris Heilmann, Daniel Cranney, Jad Joubran

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe thumbnail
1:02:34
19 days ago

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe

Chris Heilmann, Daniel Cranney, Justin Halsall, Werner Jeschko, Nicole Jeschko, Mirco Tomić

WeAreDevelopers LIVE - Web Performance in an AI World thumbnail
1:07:59
26 days ago

WeAreDevelopers LIVE - Web Performance in an AI World

Chris Heilmann, Daniel Cranney

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko thumbnail
5:55
about 2 months ago

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

From Cloud Native to Multi-Cloud Native: Write Once, Deploy Anywhere

Sandeep Pal

Principal Member of Technical Staff at Salesforce

Sandeep Pal
Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova

Related videos

Hack-Proof The Node.js runtime: The Mechanics and Defense of Path Traversal Attacks thumbnail
27:10
WWC 2023 • almost 3 years ago

Hack-Proof The Node.js runtime: The Mechanics and Defense of Path Traversal Attacks

Sonya Moisset

The Fundamentals of Online Video thumbnail
1:03:27
LIVE • almost 6 years ago

The Fundamentals of Online Video

Phil Cluff

WeAreDevelopers LIVE - CSS is DOOMed thumbnail
59:11
LIVE • 5 months ago

WeAreDevelopers LIVE - CSS is DOOMed

Chris Heilmann, Daniel Cranney, Justin Halsall, Christian Schaefer

WeAreDevelopers LIVE – Spicy Vanilla Web, CSS Magic & More thumbnail
59:40
LIVE • 9 months ago

WeAreDevelopers LIVE – Spicy Vanilla Web, CSS Magic & More

Chris Heilmann, Daniel Cranney, Peter Kröner

Security in modern Web Applications - OWASP to the rescue! thumbnail
26:59
WWC 2023 • almost 3 years ago

Security in modern Web Applications - OWASP to the rescue!

Jakub Andrzejewski

Web APIs you might not know about thumbnail
43:53
JS Congress • over 4 years ago

Web APIs you might not know about

Sasha Shynkevich

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.