How does the skill prevent path traversal attacks?

It enforces the use of Path.basename/1 on all client filenames and mandates generating unique UUIDs for stored files to ensure they remain within the intended directory.

Does this skill support AWS S3 or other external storage?

Yes, the skill includes patterns for external storage using the :external option in allow_upload, facilitating integrations with S3 through presigned URLs.

Can I use auto_upload with standard form submissions?

The skill recommends avoiding auto_upload for form patterns; manual uploads are preferred to ensure files are processed correctly during the 'save' event.

Why are my uploaded files returning a 404 error in Phoenix?

This typically happens if the upload directory is not listed in your application's static_paths() function or if the server hasn't been restarted after a configuration change.

Phoenix File Uploads

Name: Phoenix File Uploads
Author: j-morgan6

byj-morgan6

•

内容管理

Implements secure, production-grade file upload functionality for Elixir Phoenix applications following LiveView best practices.

The Phoenix File Uploads skill is a specialized guide for developers building file-handling features in the Phoenix framework. It enforces critical security standards like path sanitization and UUID-based filename generation while providing boilerplate for LiveView's allow_upload and consume_uploaded_entries workflows. By standardizing the configuration of static paths and error handling, it ensures that user-uploaded content is served correctly and securely in both development and production environments.

主要功能

01Detailed static path and Plug.Static integration for serving uploaded files

02Support for multi-file slots and external storage providers like AWS S3

0373 GitHub stars

04Automated security protocols for filename sanitization and path traversal prevention

05Standardized LiveView upload configuration for manual and auto-upload patterns

06Template-ready error handling and progress indicator patterns

使用场景

01Configuring production-ready static file serving for user-generated content

02Implementing secure document management systems with server-side validation

03Building user profile and image gallery features with LiveView previews

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add j-morgan6/elixir-phoenix-guide phoenix-uploads

For use in Claude.ai and ChatGPT

Download Skill