Comments (4)
Yes, I've decided to abandon non-js version of attachinary since it made things more complicated than it should. In this modern age (with tons of websites running exclusively on javascript (driven by various js frameworks)), i don't think it is reasonable for developers to spend time making no-js friendly version..
You are right about that "image exploit". However, i don't think that we could do anything about it. Images are uploaded directly to cloudinary, so we can't control the upload process. This is something that should be posted as an issue to cloudinary. Perhaps they will give us some kind of API that we could contact from server side to validate used uploads, so that they can auto-clean non-validated ones.
from attachinary.
Image upload exploit
Cloudinary recently released admin_api
. However this feature is still not supported. I've opened ticket for this:
from attachinary.
attachinary once again supports no-js file uploads
from attachinary.
https://github.com/assembler/attachinary#no-js-usage
from attachinary.
Related Issues (20)
- Dependency on old version of cloudinary gem HOT 4
- The attachment files options may be serialized in the wrong way
- Problem implementing has_attachments HOT 1
- destroy_file callback not invoked HOT 4
- File instances break on serialization w/ active model serializers
- Validate presence error message
- undefined method `has_attachment' HOT 3
- Rails 5.1 HOT 9
- Using with administrate gem HOT 1
- limit min and max file size upload HOT 2
- rake attachinary:install:migrations -> Index table names are too long HOT 2
- ArgumentError Exception: too few arguments
- Destroy attachinary
- Chunked video upload HOT 1
- Attachinary::File::ActiveRecord_Associations_CollectionProxy:0x007fa5fbada388
- Issue with `process_input` function with Rails 5 Parameters
- Add custom filed to attachinary
- Handling video files better
- CORS endpoint echoes unsafe JSON / Potential XSS
- attachinary_file_field as required
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from attachinary.