We have developed a Drag & Drop multiple Image Upload with Html5, jQuery and the REST API.
We are wondering what are the problems that this feature can bring up in the security review.
Let me explain how do we managed to implement this:
- With html5, enabled a div to allow the multiple drop of files
- If so, with jQuery ajax upload them, one by one, to a apex REST class. The image is received by the REST within a Blob, so we get the response.body and then put it in a document body, insert the document and return Ok to ajax.
This was implemented in a backoffice visual force page, to allow the users to upload photos for a custom objects.
Before this, we used to have a visualforce page with the apex component inputFile, and we'll keep using it, of course, for browsers versions that don't support html5.