Skip to content

Node.JS File Validation

How it works

  1. The file gets uploaded to your server.
  2. Before storing the file on disk, it is being validated on server side.

Jump to Complete Example

File Upload

In the Server Upload article we explain the steps to upload an file on your server. When you insert an file in the rich text editor, you can validate its format. However that check is done only on the filename and not on the mime type. We recommend to make additional checks on server side just to make sure that users don't upload files in bad formats.

Validate Extension

The WYSIWYG editor's Node.JS SDK comes with the possibility to check the file extension when it is being stored on the disk. Additional to the file name extension, it is using the mime type of the file for better accuracy.

var options = {
  validation: {
    'allowedExts': ['txt', 'pdf', 'doc'],
    'allowedMimeTypes': ['text/plain', 'application/msword', 'application/x-pdf', 'application/pdf']
  }
}

FroalaEditor.Image.upload(req, '/uploads/', options, function(err, data) { ... });

Custom Validation

You can also pass a custom method instead of validating the extension and mime type. This gives you full control on what types of files you want to store on disk. Below is an example of how to validate if a file is smaller than 10Mb.

var options = {
  function(filePath, mimetype, callback) {
    fs.stat(filePath, function(err, stat) {

      if(err) {
        return callback(err);
      }

      if (stat.size > 10 * 1024 * 1024) { // > 10M
        return callback(null, false);
      }

      return callback(null, true);

    });
  }
}

FroalaEditor.Image.upload(req, '/uploads/', options, function(err, data) { ... });

Complete Example

<script>
  new FroalaEditor('.selector', {
    // Set the file upload URL.
    fileUploadURL: '/image_upload',

    fileUploadParams: {
      id: 'my_editor'
    }
  })
</script>
var express = require('express');
var app = express();
var bodyParser = require('body-parser')
var path = require('path');
var fs = require('fs');
var FroalaEditor = require('PATH_TO_FROALA_SDK/lib/froalaEditor.js');

app.use(express.static(__dirname + '/'));
app.use('/bower_components',  express.static(path.join(__dirname, '../bower_components')));
app.use(bodyParser.urlencoded({ extended: false }));

app.post('/upload_image', function (req, res) {
  var options = {
    validation: {
      'allowedExts': ['txt', 'pdf', 'doc'],
      'allowedMimeTypes': ['text/plain', 'application/msword', 'application/x-pdf', 'application/pdf']
    }
  }

  FroalaEditor.Image.upload(req, '/uploads/', options, function(err, data) {

    if (err) {
      return res.send(JSON.stringify(err));
    }
    res.send(data);
  });
});
File: 2096