Projects sharing features with Active Storage Validations

Uploadthing is a tool for integrating file uploads into web applications, providing a system to accept and store files through serverless file handling. It manages the end-to-end upload process, from creating backend endpoints to delivering content via a content delivery network. The project utilizes a presigned URL workflow to allow clients to upload files directly to cloud storage, reducing server ingress. It features a route-based validation system to enforce constraints on file types and sizes, alongside middleware for request authorization and secure post-upload callback webhooks. The p

AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co

This project is a collection of specialized HTTP servers designed for static file hosting, secure file uploads, and encrypted web traffic. It provides implementations for delivering local files and directories over HTTP and HTTPS, including support for index pages and single-page application routing. The software differentiates itself through dedicated server roles, including a secure file upload server with size limits and token validation, and an HTTPS web server that utilizes PKCS#12 certificates for TLS encryption. It also includes a specialized gateway for managing cross-origin resource

ngxluawaf is an OpenResty web application firewall that uses Lua to filter malicious HTTP requests and block web attacks. It operates as a programmable request filter and IP access controller for Nginx, providing a security layer to identify and block unauthorized scanners, fuzzing attempts, and abnormal network requests. The project includes capabilities for HTTP layer 7 DDoS mitigation by restricting request frequency per IP address. It further secures the environment by restricting access to sensitive archives and blocking script execution in upload directories to prevent data leakage.

bootstrap-fileinput is a Bootstrap-compatible HTML5 file upload widget and plugin. It provides a customizable interface for selecting and uploading multiple files, featuring integrated image previews, drag-and-drop support, and client-side validation for file types, sizes, and counts. The project includes a resumable file upload client that slices large files into chunks to ensure stability over intermittent connections and allow transfers to be paused and resumed. It also features a client-side image processor capable of resizing images and reading EXIF metadata to automatically correct imag

This project is a server-side PHP library designed for managing file uploads and performing automated image processing. It provides a structured toolkit for ingesting, validating, and migrating files from temporary staging areas to permanent storage while enforcing security constraints. The library distinguishes itself through a configuration-driven pipeline that executes a sequence of transformations on image buffers. It supports a wide range of geometric adjustments, including resizing, cropping, and rotation, alongside advanced visual enhancements such as watermarks, color adjustments, and

Rails-assets is a system designed to convert, manage, and package third-party frontend dependencies into native library files. It functions as a bridge between external web components and Ruby on Rails projects, enabling developers to treat frontend assets as standard gems within their existing build pipelines. The project automates the lifecycle of these dependencies by fetching components from remote registries and transforming them into structured, installable formats. It includes a normalization layer that maps non-standard package identifiers to compliant naming conventions, ensuring tha

NanaZip is a file archiver designed for the Windows operating system that provides native tools for compressing and extracting data across a wide range of archive formats. It functions as a desktop utility that manages compressed files and folders while adhering to current platform design standards and accessibility requirements. The application distinguishes itself through a focus on system-level security and native integration. It employs manifest-driven policies and strict memory management during decompression to protect against unauthorized code execution and potential vulnerabilities fo

afrog is an HTTP vulnerability scanner and web vulnerability management system that identifies security flaws and known CVEs using a YAML-based rule engine. It functions as a payload generator and scanner, comparing server responses against detection rules to find unauthorized access points. The project provides a framework for out-of-band security testing, detecting blind vulnerabilities by triggering and verifying external DNS or HTTP callbacks. Beyond web traffic, it includes a protocol fuzzer capable of executing multi-step read and write sequences over raw TCP and SSL sockets to identify

Chartkick is a Ruby on Rails visualization library and JavaScript charting wrapper that provides a high-level interface for integrating interactive charts into web applications. It functions as a multi-engine charting adapter, wrapping various JavaScript charting libraries to provide a consistent API for rendering data visualizations. The project is distinguished by its engine abstraction, which allows users to switch between different JavaScript charting libraries without modifying the underlying data sources. It also supports asynchronous data visualization, fetching chart data from remote

Good Job is a background job processor for Ruby on Rails that utilizes a PostgreSQL database as its primary storage engine. By leveraging relational database transactions, it ensures persistent and reliable task execution, integrating directly with the Active Job framework to handle asynchronous operations and recurring job scheduling within existing application environments. The system distinguishes itself through an in-process execution model that allows background workers to run within the same process as the web server, simplifying deployment by removing the need for separate worker servi

backend-cheats is a comprehensive backend engineering reference guide and a collection of technical cheatsheets. It serves as a knowledge base for server-side development, networking, and computer science fundamentals, delivered as a markdown-based static site. The project provides detailed handbooks for API design, specifically covering REST and GraphQL interfaces, and software architecture patterns such as Monolithic, Microservices, and MVC. It includes a database architecture overview comparing relational and NoSQL paradigms, as well as a web security reference for identifying vulnerabilit

Annotate Models is a productivity utility for Ruby on Rails that maps database columns, types, and application routes directly into model and configuration files as source code comments. It functions as a schema annotator that inserts database and routing information into model files to provide a quick reference for data structures during development. The tool synchronizes model comments with database migrations to ensure that data structure references remain current. It also includes a route map injector that writes the current application routing table into configuration files as readable c

ng-file-upload is an Angular directive for handling multipart file uploads and drag-and-drop selection within Angular applications. It functions as a client-side tool for validating file attributes, processing images, and generating media previews before transmission to a server. The project includes a client-side image processor for resizing, center-cropping, and correcting JPEG EXIF orientation. It also features a browser-based media previewer for images, audio, and video files, and an HTML5 File API shim to provide upload and reader functionality for legacy browsers. Additional capabiliti

Uploader is a client-side library designed to manage asynchronous file transfers within web applications. It provides a comprehensive suite of tools for handling the entire upload lifecycle, including file selection, validation, transmission, and monitoring. The library distinguishes itself through its integration of drag-and-drop interfaces and structured queue management. It allows developers to organize multiple files into queues for sequential or parallel processing while maintaining programmatic control to start, pause, cancel, or reset individual transfer sessions. Beyond core transfer

This project is a self-hosted application performance monitoring tool designed for Ruby on Rails environments. It functions as a diagnostic platform that tracks request response times, database query efficiency, and background job performance to help identify bottlenecks within web application infrastructure. The tool distinguishes itself by integrating directly into the framework to provide real-time performance insights and developer-focused utilities, such as direct navigation from error reports to the corresponding lines in a code editor. It supports complex analysis by correlating perfor

kkFileView is a Spring Boot-based file preview server that provides a universal document viewer for rendering office files, PDFs, images, and 3D models directly in a web browser. It functions as a secure document rendering service that allows users to view a wide variety of file formats without requiring local software installations. The project distinguishes itself through specialized CAD to SVG conversion, transforming complex drawings into web-compatible formats. It includes a RESTful file preview API that allows these rendering capabilities to be integrated into external business applicat

Figaro is a configuration manager for Ruby on Rails applications that loads key-value pairs from YAML files and injects them into environment variables. It functions as a configuration validator, raising errors during startup if mandatory configuration keys are missing from the environment to prevent runtime crashes. The project includes a command-line utility for synchronizing local environment settings to remote hosting platforms and production servers. This allows for the generation of remote configuration files based on local source data. The system supports environment-specific settings

This project is a file upload module designed for the AngularJS framework, providing a comprehensive system for managing file selection, validation, and asynchronous transmission. It enables developers to build interactive web interfaces that capture local files through standard inputs or drag-and-drop zones, facilitating the entire lifecycle of a file transfer from initial selection to server-side upload. The library distinguishes itself through its focus on cross-browser consistency and granular control over the upload process. It includes an automatic fallback mechanism that routes data th

Parse Server is a backend-as-a-service solution and Node.js framework that provides a ready-to-use REST and GraphQL API for mobile and web applications. It functions as a core backend infrastructure for managing database schemas, user authentication, and API routing. The system distinguishes itself with a real-time data engine that pushes database updates to clients via WebSockets and a GraphQL server that automatically generates schemas based on application data models. It also features an adapter-based storage layer that abstracts interactions with various cloud and local backends. The pla

Solid Queue is a background job processing system for Ruby on Rails applications that utilizes a relational database as its primary storage backend. By integrating directly with the framework's native job interface, it ensures that task queues and execution states are persisted within the database, providing reliability and recoverability across system failures. The system distinguishes itself by embedding worker processes directly into the web server environment, which simplifies deployment and consolidates monitoring within existing infrastructure. It coordinates distributed worker processe

Webpacker is a frontend build tooling system and JavaScript module manager that integrates Webpack into Ruby on Rails applications. It serves as a bridge between the backend web framework and the frontend build process to compile JavaScript and CSS into browser-ready bundles. The system provides a dedicated development asset server for real-time code reloading and automatic browser refreshing. For production, it includes a precompilation pipeline that minifies scripts and stylesheets and applies network asset compression to optimize delivery. The project covers comprehensive asset management

CanCan is an authorization library for Ruby on Rails applications that provides a declarative framework for defining user permissions. It functions as a role-based access control system that decouples security logic from controllers by centralizing all ability definitions in a single location. The library distinguishes itself by translating permission rules into database-driven filters. This allows the system to retrieve only the specific records a user is permitted to see based on attribute conditions and defined scopes, rather than verifying permissions after data has been loaded. The fram

Letter Opener is a development email sandbox and interceptor for Ruby on Rails. It functions as an SMTP mocking tool that captures outgoing emails and saves them to the local file system, preventing messages from being delivered to real addresses during the development cycle. The project provides a local email previewer with a web interface. This allows for the visual verification of email layouts, content, and headers directly in a browser. The tool manages intercepted communications through directory-based artifact management and integrates directly into the application mailing pipeline to

Devise invitable is a Ruby on Rails authentication extension that adds user invitation workflows and token-based account creation to applications using Devise. It provides user invitation management capabilities that handle inviting new users via email links, tracking pending registrations, and guiding accounts through activation and password setup. The library extends existing authentication modules by injecting routes, models, and controllers into the host framework. It incorporates security mechanisms that enforce role-based permissions, check inviter authorization, and apply per-user send

vim-rails is a set of editor enhancements for navigating, testing, and managing Ruby on Rails applications within Vim. It provides a project navigator for jumping between related controllers, models, and views, a dedicated test runner for executing specs, and an interface for running framework generators and commands directly from the editor. The plugin enables the extraction of code blocks into separate partials or concerns and automatically replaces the original content with render calls. It also includes a specialized syntax highlighter that applies color coding to framework-specific metho

This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part