108 reputation
6
bio website
location
age
visits member for 1 year, 9 months
seen Aug 12 at 13:00

im bill grates of michaelsoft


Sep
24
awarded  Autobiographer
Jan
11
awarded  Scholar
Jan
11
accepted How can I solve this potential security exploit (concerning the saving of REST resources)?
Jan
11
awarded  Commentator
Jan
11
comment How can I solve this potential security exploit (concerning the saving of REST resources)?
This solution is similar to Kevin's in that the server has to store some state, but no encrypted file id needs to be used by the client. Nice!
Jan
11
comment How can I solve this potential security exploit (concerning the saving of REST resources)?
I'm not sure I see the benefit of uploading to a temporary location. When the user wants to associate the file with another entity, do they have to re-upload the entire file again to its proper location? Or does the server move it to a proper location? How is that better than having a single RESTful endpoint for file uploads that stores files in their proper non-temporary location immediately, and also handles all server-side file upload logic so you don't have to do it anywhere else?
Jan
11
comment How can I solve this potential security exploit (concerning the saving of REST resources)?
To address 1, see my response to the comment above, I'd be interested to hear your thoughts on it. As for 2, I really like that solution! I'm going to leave this question open a bit longer to get more viewpoints, but if no one chimes in I will accept this answer.
Jan
11
comment How can I solve this potential security exploit (concerning the saving of REST resources)?
It doesn't, but having a single endpoint for uploading files means I don't need to implement the server-side logic to process file uploads in multiple places. Also, it is useful if I need "preview" functionality (e.g. allowing the client to preview an uploaded image file before "saving" it with an association to a particular entity).
Jan
11
asked How can I solve this potential security exploit (concerning the saving of REST resources)?
Jun
2
comment Why isn't Java used for modern web application development?
Care to elaborate on the "the rats nest that C# is becoming" point?
Jun
2
comment Object design where hard-coded values are used to instantiate objects?
What about the edge cases?
Apr
21
awarded  Student
Jan
17
comment What constitutes a dead programming language?
Dave was always crazy, but it's funny that the man who wrote Holy Wars is now an evangelical Christian. I wonder what the programmer analogy of that is...
Jan
13
awarded  Teacher
Jan
11
asked Should one declare alternative response types (e.g. JSON) in Rails controller actions even if not utilising them?
Jan
6
answered tips, guidelines, points to remember for rendering professional code?
Jan
5
comment How to advocate Stack Overflow at work
Not to mention, just the act of typing out a SO question gets you thinking about the problem in a different way (because you have to clearly convey the problem to others), which sometimes gives you a "light bulb" moment where you suddenly figure out an answer on your own.
Jan
4
awarded  Supporter