@startupjs-ui/file-input 0.3.2 → 0.3.3

package/CHANGELOG.md

@@ -3,6 +3,17 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [0.3.3](https://github.com/startupjs/startupjs-ui/compare/v0.3.2...v0.3.3) (2026-06-13)
+
+
+### Bug Fixes
+
+* **file-input:** handle upload stream errors instead of crashing the server ([#34](https://github.com/startupjs/startupjs-ui/issues/34)) ([1ba8ac8](https://github.com/startupjs/startupjs-ui/commit/1ba8ac8b0a6e16e726a485d4ba4ae2ca5a4ae61a))
+
+
+
+
+
 ## [0.3.2](https://github.com/startupjs/startupjs-ui/compare/v0.3.1...v0.3.2) (2026-06-09)
 
 **Note:** Version bump only for package @startupjs-ui/file-input

package/files.plugin.js

@@ -233,6 +233,20 @@ export default createPlugin({
             mimeType = 'image/jpeg'
           }
 
+          // Surface stream errors (e.g. sharp failing to decode a corrupt or
+          // forged "image/*" upload) as a 400 instead of letting an unhandled
+          // 'error' event crash the whole server process. This is essential for
+          // public/untrusted uploads, where a single garbage payload with an
+          // image mime type would otherwise take the server down. Attach to the
+          // source busboy stream and, for images, the sharp stream too — an
+          // unhandled 'error' on either is fatal.
+          const onStreamError = err => {
+            console.error('[StartupJS Files] Upload stream error:', err)
+            if (!res.headersSent) res.status(400).send('Invalid file data')
+          }
+          file.on('error', onStreamError)
+          if (stream !== file) stream.on('error', onStreamError)
+
           // Regardless of whether it's an image or not, collect the data
           stream.on('data', data => buffers.push(data))
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@startupjs-ui/file-input",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "publishConfig": {
     "access": "public"
   },
@@ -49,5 +49,5 @@
       "optional": true
     }
   },
-  "gitHead": "5a105b1b5bfc8ab0905b7bd79251b4b88be0fd45"
+  "gitHead": "d3d37d5c01055fd39a3fc27b9b54fee0dc71589d"
 }