74 रिपॉजिटरी
Tools for validating and sanitizing user-uploaded files to prevent malicious content execution.
Distinguishing note: Focuses on the security validation of file uploads rather than general file storage management.
Explore 74 awesome GitHub repositories matching security & cryptography · File Upload Security. Refine with filters or upvote what's useful.
यह प्रोजेक्ट निजी सर्वर वातावरण और होम लैब में डिप्लॉयमेंट के लिए डिज़ाइन किए गए ओपन-सोर्स सॉफ्टवेयर की एक समुदाय-क्यूरेटेड निर्देशिका है। यह मुख्यधारा की क्लाउड सेवाओं के स्वतंत्र, स्व-होस्ट किए गए विकल्पों को खोजने के लिए एक व्यापक संसाधन के रूप में कार्य करता है, जिससे उपयोगकर्ता अपने डिजिटल इंफ्रास्ट्रक्चर पर पूर्ण डेटा स्वामित्व और नियंत्रण बनाए रख सकते हैं। निर्देशिका को एक पदानुक्रमित वर्गीकरण के माध्यम से संरचित किया गया है जो अनुप्रयोगों के एक विशाल संग्रह को तार्किक श्रेणियों में व्यवस्थित करता है, जो मीडिया प्रबंधन और डेटा एनालिटिक्स से लेकर निजी संचार और टीम उत्पादकता टूल तक फैला हुआ है। यह एक सहयोगात्मक पीयर-रिव्यू प्रक्रिया के माध्यम से खुद को अलग करती है, जहाँ समुदाय के सदस्य निर्देशिका को सटीक और विश्वसनीय सुनिश्चित करने के लिए प्रत्येक सबमिशन की गुणवत्ता और प्रासंगिकता को मान्य करते हैं। प्रोजेक्ट इंफ्रास्ट्रक्चर ऑटोमेशन, कंटेनर-आधारित सर्विस डिप्लॉयमेंट और घोषणात्मक कॉन्फ़िगरेशन प्रबंधन सहित क्षमताओं के एक व्यापक क्षेत्र को कवर करता है। ये टूल उपयोगकर्ताओं को पुनरुत्पादनीय सर्वर वातावरण बनाए रखने और निजी हार्डवेयर पर जटिल सर्विस निर्भरताओं को प्रबंधित करने में सहायता करते हैं। निर्देशिका को एक वर्ज़न-कंट्रोल रिपॉजिटरी के रूप में बनाए रखा जाता है, यह सुनिश्चित करते हुए कि सभी अपडेट और समुदाय-संचालित परिवर्तन ट्रैक किए जाते हैं और पारदर्शी हैं।
Analyzes uploaded files using integrated antivirus tools to detect and block malicious content before storage.
Agent-skills is a collection of structured instructions and behavioral personas designed to standardize how AI coding agents perform engineering tasks. It functions as a workflow orchestrator that maps natural language intent to repeatable technical sequences and verification checklists. The project distinguishes itself through the use of specialized markdown-defined roles, such as security auditors or test engineers, to apply targeted domain expertise. It employs an evidence-based verification model that requires runtime data or passing tests as mandatory exit criteria to ensure AI-generated
Includes security standards for file uploads, focusing on MIME type restriction and size limits.
The OWASP Cheat Sheet Series is a comprehensive, community-driven repository of concise security best practices and defensive coding patterns. It serves as a centralized knowledge base for developers and security professionals, providing actionable guidance to secure applications across the entire software development lifecycle. The project covers a vast array of security domains, ranging from fundamental web application hardening and authentication protocols to specialized controls for modern infrastructure and artificial intelligence systems. What distinguishes this project is its decentral
Validates file types and contents to prevent the upload of malicious scripts.
Filament is a full-stack framework for building administrative panels and management interfaces within the Laravel ecosystem. It provides a declarative, component-based architecture that allows developers to construct complex, data-driven applications using server-side configuration objects rather than manual HTML. By inspecting database model structures and relationships, the framework automates the generation of CRUD interfaces, forms, and data tables, significantly reducing boilerplate code. The project distinguishes itself through a highly modular and extensible design that supports custo
Restricts file upload capabilities to only those components explicitly defined within a schema to prevent unauthorized uploads.
This project is a jQuery-based file upload widget that provides a browser interface for selecting and transferring files to a server. It functions as a chunked file uploader and a resumable upload client, enabling the transfer of large files by splitting them into smaller segments or continuing interrupted uploads from the last successfully sent byte. The tool includes a client-side image processor for validating, resizing, and generating previews of images before transmission. It also serves as a cross-domain upload tool, using various transport mechanisms to send files to different domains
Enforces restrictions on allowed file extensions and size limits before uploads are initiated.
PHPMailer is a comprehensive library for constructing and sending complex email messages within PHP applications. It provides an object-oriented framework for building MIME-compliant emails, managing attachments, and handling multi-format content such as HTML and plain-text alternatives. The library serves as a robust interface for email dispatch, supporting both individual messaging and high-performance bulk distribution through persistent connections. The project distinguishes itself through a deep focus on secure transmission and identity verification. It integrates advanced security proto
Sanitizes attachment filenames to prevent security filter bypasses and ensure compliance with email protocol requirements.
This platform is a modular, metadata-driven framework designed for building custom business applications and data management systems without traditional coding. It functions as a low-code environment where data models, user interfaces, and business logic are defined through visual configurations rather than hardcoded views. The architecture supports multi-tenant isolation, allowing multiple independent applications to run within a single shared memory space while maintaining strict logical separation of data and configurations. What distinguishes this system is its deep integration of artific
Enforces strict MIME type allowlists and private storage to prevent the execution of malicious user-uploaded content.
Parse Server is a backend-as-a-service solution and Node.js framework that provides a ready-to-use REST and GraphQL API for mobile and web applications. It functions as a core backend infrastructure for managing database schemas, user authentication, and API routing. The system distinguishes itself with a real-time data engine that pushes database updates to clients via WebSockets and a GraphQL server that automatically generates schemas based on application data models. It also features an adapter-based storage layer that abstracts interactions with various cloud and local backends. The pla
Prevents SSRF attacks by validating file URLs against a list of allowed domains during upload.
Wekan एक ओपन-सोर्स, सेल्फ-होस्टेड Kanban प्रोजेक्ट मैनेजमेंट टूल है जिसका उपयोग बोर्ड, लिस्ट और कार्ड के माध्यम से वर्कफ़्लो को व्यवस्थित करने के लिए किया जाता है। यह एक रीयल-टाइम वेब एप्लिकेशन है जो टीमों को निजी इंफ्रास्ट्रक्चर पर कार्यों का प्रबंधन करने की अनुमति देता है। प्लेटफॉर्म व्यापक डेटा माइग्रेशन टूल के साथ खुद को अलग करता है, विशेष रूप से Trello से बोर्ड और कार्ड आयात करने के लिए। यह LDAP, OpenID Connect और OAuth2 के माध्यम से एंटरप्राइज़-ग्रेड पहचान एकीकरण का समर्थन करता है, और अटैचमेंट के लिए प्राथमिक रिलेशनल बैकएंड के रूप में PostgreSQL और प्लगेबल क्लाउड स्टोरेज सहित लचीले स्टोरेज विकल्प प्रदान करता है। सिस्टम Gantt चार्ट विज़ुअलाइज़ेशन, समय ट्रैकिंग और क्रॉस-बोर्ड कार्य एकत्रीकरण सहित कार्य प्रबंधन क्षमताओं की एक विस्तृत श्रृंखला को कवर करता है। इसमें भूमिका-आधारित एक्सेस कंट्रोल, स्वचालित बैकअप शेड्यूलिंग, और REST API और इवेंट-ड्रिवन वेबहुक के माध्यम से प्रोग्रामेटिक एक्स्टेंसिबिलिटी के लिए प्रशासनिक उपकरण शामिल हैं। एप्लिकेशन Docker के माध्यम से परिनियोजन के लिए उपलब्ध है और मल्टी-टेनेंट कॉन्फ़िगरेशन का समर्थन करता है।
Prevents the execution of malicious scripts by forcing the download of uploaded files using safe headers.
Excelize is a library for reading and writing spreadsheet files in the Office Open XML format. It provides a comprehensive suite of tools for programmatically creating, modifying, and analyzing workbooks, worksheets, and cell data, ensuring compatibility across various office software suites through structured XML serialization. The library distinguishes itself with a built-in formula calculation engine that evaluates complex mathematical and logical expressions directly against workbook data. It also features a memory-mapped streaming architecture, which allows for the efficient processing o
Validates incoming files against constraints like type and size to ensure secure uploads.
Wagtail is an open-source content management system built on the Django web framework. It provides a structured, tree-based approach to content modeling, allowing developers to define custom page types and reusable content components that are managed through a highly customizable administrative interface. The platform distinguishes itself through its flexible, block-based content composition system, which enables editors to assemble complex page layouts dynamically. It also offers robust support for multi-site and multi-lingual environments, allowing organizations to manage distinct websites
Enforces constraints on file types, extensions, and sizes to ensure secure and efficient document storage.
BookStack is a self-hosted knowledge base platform designed for organizing, storing, and managing structured documentation. It utilizes a hierarchical content model that arranges information into nested trees of books, chapters, and pages, supported by a dedicated search index for rapid retrieval across the entire knowledge base. The platform distinguishes itself through deep integration with enterprise identity providers, allowing organizations to centralize authentication and access control via LDAP, SAML, or OIDC. It provides extensive administrative control over the content lifecycle, inc
Validates file types to enable secure, in-browser viewing of attachments within the documentation interface.
Magika is an AI content type classifier and MIME type prediction engine that uses deep learning to identify file formats based on binary data. It analyzes byte sequences through a neural network to predict the content type of a file and provide associated confidence scores. The system features a foreign function interface that allows the core detection logic to be integrated across different programming languages. It includes a mechanism for configuring detection sensitivity and per-type thresholds to balance precision and recall. The project provides capabilities for bulk file analysis via
Provides accurate MIME types and confidence scores by identifying the content type of files via deep learning.
Transfer.sh is a self-hosted file storage server designed for rapid data sharing through a command-line interface. It functions as an encrypted hosting platform that allows users to upload and download files using standard HTTP requests, facilitating direct data transfer between systems without the need for external accounts or complex configurations. The service distinguishes itself by processing data as continuous streams, which minimizes memory usage during large transfers. It provides granular control over file availability through automated lifecycle management, allowing administrators t
Validates and scans uploaded files for malicious content before storage.
kkFileView is a Spring Boot-based file preview server that provides a universal document viewer for rendering office files, PDFs, images, and 3D models directly in a web browser. It functions as a secure document rendering service that allows users to view a wide variety of file formats without requiring local software installations. The project distinguishes itself through specialized CAD to SVG conversion, transforming complex drawings into web-compatible formats. It includes a RESTful file preview API that allows these rendering capabilities to be integrated into external business applicat
Prevents the upload of high-risk or unsupported file types using a configurable extension blacklist.
NanaZip is a file archiver designed for the Windows operating system that provides native tools for compressing and extracting data across a wide range of archive formats. It functions as a desktop utility that manages compressed files and folders while adhering to current platform design standards and accessibility requirements. The application distinguishes itself through a focus on system-level security and native integration. It employs manifest-driven policies and strict memory management during decompression to protect against unauthorized code execution and potential vulnerabilities fo
Protects system integrity during data extraction by enforcing strict memory policies against malicious content.
Formbricks is an open-source survey and feedback platform designed to help teams capture and analyze user insights through targeted, in-app, and website-based interactions. It functions as a comprehensive customer experience analytics system that allows organizations to maintain full control over their data, user attributes, and survey workflows. The platform distinguishes itself through its event-driven architecture, which enables precise behavioral targeting by triggering surveys based on specific user actions or application events. It supports deep integration with external ecosystems by a
Generates secure, signed URLs for private file access to ensure only authorized users can view uploaded content.
Multer is a multipart form parser and file upload manager designed as middleware for Node.js and Express.js applications. It extracts text fields and uploaded files from incoming requests to populate the request body and file objects for server-side use. The project utilizes pluggable storage engines to abstract file persistence, allowing developers to switch between saving files to a physical disk or holding them as buffers in system memory. It supports customizable file naming strategies and a custom storage engine interface for defining how files are saved and deleted. The middleware incl
Provides a request validator to enforce file size limits and filter accepted files using custom predicate functions.
Kubescape is a Kubernetes security posture management platform designed to scan clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance risks. It functions as a comprehensive security suite incorporating a compliance scanner, a container image vulnerability scanner, an admission controller for policy enforcement, and a runtime security monitor. The platform distinguishes itself through runtime-aware vulnerability filtering, which maps libraries loaded in memory to determine if vulnerabilities are actually reachable. It also integrates with AI assistants via a Mo
Integrates an antivirus engine to scan files and volumes on cluster nodes for malicious software.
react-dropzone is a React hook and HTML5 drag-and-drop wrapper used to create interactive areas that accept files via drag-and-drop or a native system file picker. It serves as a web file system interface, bridging browser interfaces with the operating system's file selection process. The project distinguishes itself by managing complex event propagation to isolate drop zones and providing global drag-state detection for document-wide visual feedback. It supports both traditional hidden input triggers and the modern browser File System Access API for secure context integration, and it can det
Restricts uploads to specific MIME types and file extensions to ensure format compliance.