|
|
@@ -96,7 +96,15 @@ But, Uppy is also free as in freedom. And so if you can't help our cause, set `p
|
|
|
|
|
|
## Server News
|
|
|
|
|
|
-On the Server side we tackled a number of security issues:
|
|
|
+We occasionally get questions about the required servers for Uppy. Uppy does not require special servers. You can use Uppy for free in the browser and let it upload to your existing Apache/Nginx server. Sprinkle a few lines of HTML/JS and that's it.
|
|
|
+
|
|
|
+**If you want integration with Instagram** Dropbox and friends, you'll need to run an 'Uppy Server' in the datacenter to help with OAuth secrecy and fetching large files and uploading those, bypassing the client. No fun to have several gigabytes pass through your mobile tubes - best let the datacenters sort this out among themselves. That's what Uppy Server is for.
|
|
|
+
|
|
|
+**If you want resumable uploads**, you'll need a <https://tus.io/> speaking server.
|
|
|
+
|
|
|
+You can run these optional servers yourself, or use the hosted variants provided by our company [Transloadit](https://transloadit.com/) for 💸. Transloadit also adds a wide range of encoding/processing features.
|
|
|
+
|
|
|
+Now that that's sorted out, let's see what we improved on the Uppy Server side! We tackled a number of security issues:
|
|
|
|
|
|
- Fixed security vulnerability in transient dependency [#70](https://github.com/transloadit/uppy-server/issues/70)
|
|
|
- Auto-generate tmp download file name to avoid Path traversal
|
Kevin van Zonneveld