Repository navigation
Add virus scanning example to documentation #1098
Description
Hi, formidable is great for handling multipart uploads. One gap
in the ecosystem is documentation around scanning uploaded files
for malware before saving them.
I built pompelmi (https://github.com/pompelmi/pompelmi) — a
zero-dependency ClamAV wrapper for Node.js that integrates cleanly
with formidable's streaming API. Would a security section in the
docs be welcome? Happy to open a PR.
Activity
tunnckoCore commentedon May 15, 2026
@SonoTommy heya, i'm in a major refactor, and yeah will include some security tips. Will check pompelmi when i get some more time, looks good.
GrosSacASac commentedon May 18, 2026
Are you planning to run uploaded files as executable ?
I would say , handle uploaded files like any other user input. It can be anything and as long as you don't evaluate it as code there is no danger.
See also SQL injections.