node-formidable/formidable
Formidable
Formidable is a streaming multipart form parser and file upload handler for Node.js. It provides the utility to process incoming HTTP requests containing a mix of text fields and files, converting them into structured data.
The project is designed as a multipart data streamer that can pipe incoming uploads directly to the local filesystem or cloud storage providers. It includes a cloud storage upload bridge to route streams to services such as AWS S3, Azure, or GCP without requiring intermediate local disk storage.
The tool incorporates server-side file validation and security controls, including filename sanitization to prevent directory traversal attacks and resource guarding to enforce maximum file sizes and counts. It further supports real-time upload progress tracking and custom data filtering.
Features
- Multipart Form Parsing - Provides a streaming parser for extracting files and text fields from multipart/form-data requests.
- Cloud File Uploaders - Provides utilities for streaming uploaded files directly to remote cloud storage like AWS S3, Azure, or GCP.
- Cloud Storage Integrations - Streams incoming file data directly to remote cloud platforms to avoid local disk storage.
- Filename Sanitizers - Sanitizes incoming file metadata and restricts write paths to prevent directory traversal attacks.
- Resource Constraints - Enforces maximum file counts and size limits during streaming to prevent server resource exhaustion.
- Server-Side Upload Constraints - Enforces server-side limits on upload sizes and file counts to protect against resource abuse.
- Server-Side Volume Restrictions - Enforces maximum file counts and size limits during the stream process to prevent server memory or disk exhaustion.
- File Upload Handlers - Provides a server-side utility for managing file size limits, filename sanitization, and upload progress tracking.
- Streamed Parsing - Processes incoming request bodies as a continuous stream to handle large uploads without memory exhaustion.
- URL Data Parsing - Converts standard URL-encoded query strings from non-multipart form submissions into structured data objects.
- Upload Progress Tracking - Emits events after each parsed chunk to monitor upload bytes and completion status in real-time.
- Writable Stream Integration - Redirects file data to custom writable streams for direct uploads to cloud providers or disks.
- Cloud Storage Upload Bridges - Provides a bridge to pipe multipart request streams directly to AWS S3, Azure, or GCP buckets.
- Custom File Storage Logic - Defines how uploaded files are named, where they are stored, and how they are written to disk.
- Real-time Stream Uploads - Redirects uploaded file data to a writable stream for direct, real-time cloud or private storage uploads.
- Incoming File Filters - Intercepts and filters specific fields or files from a multipart stream based on custom business logic.
- Upload File Filtering - Evaluates incoming files against custom predicate functions to selectively accept or reject specific uploads.
- Incoming Request Field Filters - Provides custom logic to filter specific fields or files during the multipart parsing process.
- Stream Interception - Allows overriding default part handlers to manually process and validate specific segments of a multipart stream.
