Skip to content

Commit d513004

Browse files
committed
Update README.md
Added security measure to prevent access to file data except for when uploading.
1 parent 3ea3b2b commit d513004

File tree

1 file changed

+32
-0
lines changed

1 file changed

+32
-0
lines changed

README.md

+32
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,38 @@ On the frontend:
4545
<script>$('#fileupload').fileupload({ dataType: 'json' })</script>
4646
```
4747

48+
To prevent access to /upload except for post (for security)
49+
```javascript
50+
upload.configure({
51+
uploadDir: __dirname + '/public/uploads/',
52+
uploadUrl: '/uploads'
53+
});
54+
55+
/// Redirect all to home except post
56+
app.get('/upload', function( req, res ){
57+
res.redirect('/');
58+
});
59+
60+
app.put('/upload', function( req, res ){
61+
res.redirect('/');
62+
});
63+
64+
app.delete('/upload', function( req, res ){
65+
res.redirect('/');
66+
});
67+
68+
app.use('/upload', function(req, res, next){
69+
upload.fileHandler({
70+
uploadDir: function () {
71+
return __dirname + '/public/uploads/'
72+
},
73+
uploadUrl: function () {
74+
return '/uploads'
75+
}
76+
})(req, res, next);
77+
});
78+
```
79+
4880
Overriding global configuration
4981

5082
```javascript

0 commit comments

Comments
 (0)