bootstrap-file-input

bootstrap-file-input copied to clipboard

Allow for good CSP

1

This PR removes inline CSS styles to allow a more-strict CSP, disallowing inline styles.

leonklingele

clear file input after event

2

allows same file to be uploaded twice

varung

Remove inline CSS

1

Please remove inline CSS as seen here: 1. https://github.com/grevory/bootstrap-file-input/blob/bf93e97d440ca4cb97f7990f4879c187c712128f/bootstrap.file-input.js#L122-127 2. https://github.com/grevory/bootstrap-file-input/blob/master/bootstrap.file-input.js#L131-136 Inline CSS should be turned off in favor of a good CSP.

leonklingele

Hello, i am having a struggle using the input type file, here is the question, i am filling the input normally, selecting the photo and then submitting the form, the...

fcferreira29

[enhancement] Add missing bower.json.

3

#### Hey, maintainer(s) of grevory/bootstrap-file-input! We at [VersionEye](https://www.versioneye.com/signup?promo_code=BOWER) are working hard to keep up the quality of the bower's registry. We just finished our initial analysis of the quality of...

timgluz

# Steps to reproduce: 1. Open file browser 2. Select a file 3. Confirm selection (usually with button "Open") - File browser closes and file name is shown on button...

leonklingele

I want an option to not show the filename. Currently it is only supported to show the filename inside or outside the button.

floydqwz

[xss] - XSS via filename

1

https://github.com/grevory/bootstrap-file-input/blob/master/bootstrap.file-input.js#L112: ``` $(this).parent().after(''+fileName+''); ``` This opens up users of this library to XSS attacks [1]. `fileName` should be escaped before it is used inside raw HTML. [1] https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)

pwnetrationguru

Validate file extension

2

Can you add support for a new attribute called 'validate' or something like that where you can pass a value or values separated with commas. This way if the file...

jorgecas99

Remove the Events and Binding

1

How can we remove the Events and Binding in the plugin

madhurtandon