expressjs / expressjs/multer

Security: add virus scanning example to README

Open
#1,403 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
12.1k
Forks
1.1k
Avg merge
8d 2h
Merged PRs (30d)
21

Description

Hi, I wanted to suggest adding a security section to the README
covering virus scanning of uploaded files.

Most developers using multer don't realize their upload endpoints
accept malware without any content inspection. A brief example
using memoryStorage + scanBuffer would help a lot.

I built pompelmi (https://github.com/pompelmi/pompelmi) specifically
for this use case — zero dependencies, typed verdicts, works directly
with multer's memoryStorage. Happy to contribute a PR adding the
example to the docs if that would be welcome.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.