Virus Scan Integration
This demo endpoint performs a lightweight server-side scan before saving the file. It rejects uploads whose name contains eicar, virus, malware, or infected, and it also checks the file body for the standard EICAR test signature.
What you should see: each upload is scanned server-side after it lands; an infected file is quarantined and reported rather than being stored for download.
Quick test: rename a harmless text file to something like
virus-demo.txt to trigger rejection.
Upload a normal file for a clean result, or use a test filename to trigger the demo scanner.
CoreUpload.create('#virus-uploader', {
uploadUrl: '/demo/security/virus-scan-upload',
autoUpload: true
});