Can a website be infected through javascript or other client language?

Question

Information Security

Hello! I want to add one feature to the site. To do this, users will enter links to html, css, js files. Question: Can my site be infected through these links?
This function is not related to the database in any way, so all that remains is the download of the shell, virus, etc. to the server.

Answer 1

Check the markup when uploading files to make sure it matches the extension exactly.
After downloading - put in a folder with rights to prohibit the launch (execute).
If you do everything right, they won't be able to.

Answer 2

If you leave the possibility of these JS being executed, then they can easily slip a browser miner.