PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Handling Large File Uploads in React: Securely Using AWS S3 Pre-signed URLs

hackerone.com | blog | #cloud | #cloud-security | #aws | #react | #file-upload | #s3 | #presigned-urls
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

S3 pre-signed URLs let React apps upload multi-gigabyte files without exposing AWS credentials. The article covers short-lived URLs, CORS settings, client validation, logging, and multipart uploads.
Published
Collected

Related coverage

blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
blog · hackerone.com
Leveraging the 'key' Property in React for Efficient Rendering
HackerOne's developer guide to React's key property: how stable unique identifiers drive efficient list re-rendering, why array indexes cause state bugs, and common pitfalls like Math.random() keys.
blog · hackerone.com
Why You Should Consider Using React Over jQuery
HackerOne compares React and jQuery on functionality, security, and maintainability, arguing teams still running legacy jQuery projects should consider migrating to React as 2024 development evolves.
blog · hackerone.com
Implementing a Custom React Hook: Best Practices and a Practical Example
A tutorial on writing custom React hooks, building a useEventListener hook that manages adding and removing listeners to prevent memory leaks, with naming and dependency-array best practices.
blog · hackerone.com
Simplify React State Management Using Redux Toolkit
How Redux Toolkit tames Redux boilerplate for React state management, cutting repetition and making complex state logic more efficient and less error-prone.
Back