1 个仓库
Validation frameworks that prevent file spoofing by inspecting actual content against declared types.
Distinct from Ruby on Rails Integrations: Focuses on security-specific validation tools rather than general framework integrations.
Explore 1 awesome GitHub repository matching web development · Security Validation Frameworks. Refine with filters or upvote what's useful.
Active Storage Validations 是一个 Ruby on Rails 库,为文件附件提供模型级别的验证助手。它直接集成到标准验证生命周期中,以确保上传的内容在持久化到存储之前符合定义的业务要求。 该框架强制执行关于文件大小、内容类型、尺寸和附件数量的约束。它包含安全机制,通过检查文件的二进制签名来检测并阻止内容类型欺骗,以验证其真实格式是否与声明的扩展名匹配。 除了基本验证,该库还通过强制执行特定的宽高比和尺寸来支持媒体资产质量控制。它还提供测试匹配器,以验证这些约束在开发工作流中是否配置正确。
Prevents file spoofing by inspecting the actual content of uploaded files against declared MIME types.