Skip to main content
All docs
V24.1

IFileInputSelectedFile.Name Property

Returns the file name.

Namespace: DevExpress.Blazor

Assembly: DevExpress.Blazor.v24.1.dll

NuGet Package: DevExpress.Blazor

Declaration

string Name { get; }

Property Value

Type Description
String

The file name.

Remarks

To introduce secure file upload operations to your application, you should always validate the file name. You can perform the following actions:

  • Check the name length.
  • Check that the name contains only allowed characters.
  • If you save the file to a real file system, check whether the result file path is within the expected root directory. Call the Path.GetFullPath method to resolve path information.

The following example gets names of uploaded files:

<DxFileInput FilesUploading="OnFilesUploading" />

@code {
    async Task OnFilesUploading(FilesUploadingEventArgs args) {
        foreach (var file in args.Files) {
            // Do not rely on or trust the name without validation.
            var name = file.Name;
            /* The following code is intended for demonstration purposes only.
            Do not read a stream directly in memory to avoid performance and security-related issues. */
            using var stream = new System.IO.MemoryStream();
            await file.OpenReadStream(file.Size).CopyToAsync(stream);
        }
    }
}
See Also