Skip to content

Upgrading formidable 1 to 2

Breaking1.2.6 → 2.1.5Breaking4Security2New7Changed5Fixed4Other6

Full comparisonBack to formidable
BreakingUpgrade verdict

4 breaking changes and 2 security fixes.

In plain terms
  • The hashing option has a new name.
  • The uploaded file's path property has a new name.
  • The uploaded file's type property has a new name.
  • The single name property is replaced by two properties for the generated name and the original upload name.
Must act Top 5 of 6 that need code or config changes

Adds @paralleldrive/cuid2 ^2.2.2, dezalgo ^1.0.4, once ^1.4.0, qs ^6.11.0.

Installs 28 packages in all (was 0).

What you must change

Breaking4
Renames option.hash into option.hashAlgorithm.
option.hashoption.hashAlgorithm
2.0.0CHANGELOG.mdSummarizedView source
Renames file.path into file.filepath.
file.pathfile.filepath
2.0.0CHANGELOG.mdSummarizedView source
Renames file.type into file.mimetype.
file.typefile.mimetype
2.0.0CHANGELOG.mdSummarizedView source
Splits file.name into file.newFilename and file.originalFilename.
file.namefile.newFilenamefile.originalFilename
2.0.0CHANGELOG.mdSummarizedView source
Security2
Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content
Low · CVSS 3.1
2.1.3GitHub AdvisoryOriginalView source
Prevents directory traversal attacks by default.
2.0.0CHANGELOG.mdSummarizedView source