9 Steps for Safe Handling of User Files on a Website
summary
Covers secure handling of user-uploaded files on websites and apps, naming common vectors like photos, videos and attachments that can threaten applications or server infrastructure. Describes a nine-step practical approach to validate, sanitize, store and process uploads safely to prevent vulnerabilities and operational problems.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:08File lifecycle
- 3:39Browser-level security
- 6:50Request authorization checks
- 7:33Web server threats
- 10:45Basic PHP file checks
- 15:06File-specific checks
- 17:13External utility handling
- 22:11Server-side binaries
- 27:30Third-party utility vulnerabilities
- 29:38Docker isolation
- 34:42Security system approach
- 35:24Summary
- 37:11Q&A
related talks
32mThe dangerous, exquisite art of safely handing user-uploaded files.
57mThe Naked Truth About Files
34mFile API: Client-Side File Handling and Uploading to the Server
10mIntroduction to web security
01h 04mWeb Security And You
22mWeb development security fundamentals
30mWeb Security Engineering - Protect all layers of your project
41mBuilding Your Own Malware Sandbox