Secure file uploads

Created by CodeCraft LLC

Implement and review secure file uploads and downloads

Product and technology names are trademarks of their respective owners, used only to identify what this skill covers. CodeCraft LLC is not affiliated with or endorsed by them.

by Jace (@jamick)v1.0.1 · updated 2026-10-03Report copyright infringement

Description

Implement and review secure file uploads and downloads — direct-to-storage signed uploads (Supabase Storage, S3/R2 presigned URLs), size and content-type validation by magic bytes, random storage keys, private buckets and signed download URLs, safe serving (Content-Disposition, separate domain for untrusted content, no inline HTML/SVG from your origin), image re-encoding and EXIF stripping, archive handling (zip slip, zip bombs), malware scanning, resumable uploads, quotas, orphan cleanup, and storage policies. Use whenever users upload or download files (avatars, attachments, documents, packages, zip archives), the user configures buckets/storage policies, or reviews upload, download, or archive-processing code.

#backend#file#uploads

Included with all-access

$9.00 value as a single download

AiSkillz is in preview: browse the catalogue now - skill downloads and subscriptions open soon.

All skills are included with the all-access subscription

Changelog

v1.0.1Oct 3, 2026Latest

Changed

Added a trademark notice to the README.

v1.0.0Oct 2, 2026

Added

First release.