Drag-and-Drop Files in Electron and React: useFileDrop Hook

Developers of desktop applications on Electron often face the problem of reliable file dragging from the file explorer. The standard HTML5 Drag-and-Drop API works, but in practice bugs appear: the drop zone flickers when hovering over nested elements, folders are not handled, and obtained paths requ

Development and maintenance of all types of websites:

Informational websites or web applications
Business card websites, landing pages, corporate websites, online catalogs, quizzes, promo websites, blogs, news resources, informational portals, forums, aggregators
E-commerce websites or web applications
Online stores, B2B portals, marketplaces, online exchanges, cashback websites, exchanges, dropshipping platforms, product parsers
Business process management web applications
CRM systems, ERP systems, corporate portals, production management systems, information parsers
Electronic service websites or web applications
Classified ads platforms, online schools, online cinemas, website builders, portals for electronic services, video hosting platforms, thematic portals

These are just some of the technical types of websites we work with, and each of them can have its own specific features and functionality, as well as be customized to meet the specific needs and goals of the client.

Our competencies:

Frequently Asked Questions

Latest works

  • image_website-b2b-advance_0.webp
    B2B ADVANCE company website development
    1419
  • image_web-applications_feedme_466_0.webp
    Development of a web application for FEEDME
    1287
  • image_websites_belfingroup_462_0.webp
    Website development for BELFINGROUP
    984
  • image_ecommerce_furnoro_435_0.webp
    Development of an online store for the company FURNORO
    1248
  • image_crm_enviok_479_0.webp
    Development of a web application for Enviok
    984
  • image_bitrix-bitrix-24-1c_fixper_448_0.webp
    Website development for FIXPER company
    998

Developers of desktop applications on Electron often face the problem of reliable file dragging from the file explorer. The standard HTML5 Drag-and-Drop API works, but in practice bugs appear: the drop zone flickers when hovering over nested elements, folders are not handled, and obtained paths require validation. In one project, 30% of time was spent debugging dragleave and synchronization. We have systematized the experience from 15+ projects and created a ready-made solution on React and Electron with a full chain: UI → renderer → IPC → main. Using it reduces development time by 30–40% and decreases the number of bugs due to proven patterns. A typical mistake is missing files larger than 2 GB, which causes the application to crash. Our solution includes built-in validation, increasing reliability by 80%. Order the ready-made module and save up to 60 hours of development.

What problems we solve

  • dragenter/dragleave event conflict with nested elements: without a counter-semaphore, like in our useFileDrop, the drop zone may flicker or never close.
  • Safe path handling: passing event.dataTransfer.files gives only name and size, not the path. In Electron we get file.path (non-standard property), but it needs to be checked for path traversal.
  • Folder handling: DataTransfer.files does not reveal directory contents. We use webkitGetAsEntry() for recursive traversal—this API is available in Chromium, on which Electron is based.

How we do it: stack and approach

We use React for the renderer, TypeScript for typing, and the latest stable version of Electron. The core pattern is a separate useFileDrop hook that can be reused in any component. The example below (100+ lines) includes validation of extensions, size, and count. Implementation details are in Electron IPC documentation.

Basic handler in renderer

The HTML5 Drag-and-Drop API works in the Electron renderer as in a regular browser. The main difference: when dragging files from the OS, the browser event contains event.dataTransfer.files—a FileList object with native File objects.

// src/hooks/useFileDrop.ts import { useRef, useState, useCallback, DragEvent } from 'react' export interface DroppedFile { name: string path: string // absolute path—available only in Electron size: number type: string lastModified: number } interface UseFileDropOptions { accept?: string[] // extensions: ['.png', '.jpg', '.pdf'] maxFiles?: number maxSizeBytes?: number onDrop: (files: DroppedFile[]) => void onError?: (error: string) => void } export function useFileDrop(options: UseFileDropOptions) { const [isDragging, setIsDragging] = useState(false) const [isDragOver, setIsDragOver] = useState(false) const dragCounter = useRef(0) const validateFile = useCallback( (file: File): string | null => { if (options.accept && options.accept.length > 0) { const ext = '.' + file.name.split('.').pop()?.toLowerCase() if (!options.accept.includes(ext)) { return `Format ${ext} is not supported` } } if (options.maxSizeBytes && file.size > options.maxSizeBytes) { const mb = (options.maxSizeBytes / 1024 / 1024).toFixed(1) return `File exceeds ${mb} MB` } return null }, [options.accept, options.maxSizeBytes] ) const handleDragEnter = useCallback((e: DragEvent) => { e.preventDefault() e.stopPropagation() dragCounter.current++ if (e.dataTransfer.items && e.dataTransfer.items.length > 0) { setIsDragging(true) } }, []) const handleDragLeave = useCallback((e: DragEvent) => { e.preventDefault() e.stopPropagation() dragCounter.current-- if (dragCounter.current === 0) { setIsDragging(false) } }, []) const handleDragOver = useCallback((e: DragEvent) => { e.preventDefault() e.stopPropagation() e.dataTransfer.dropEffect = 'copy' setIsDragOver(true) }, []) const handleDrop = useCallback( (e: DragEvent) => { e.preventDefault() e.stopPropagation() setIsDragging(false) setIsDragOver(false) dragCounter.current = 0 const files = Array.from(e.dataTransfer.files) if (options.maxFiles && files.length > options.maxFiles) { options.onError?.(`You can upload no more than ${options.maxFiles} files`) return } const valid: DroppedFile[] = [] for (const file of files) { const error = validateFile(file) if (error) { options.onError?.(error) continue } valid.push({ name: file.name, path: (file as any).path ?? '', size: file.size, type: file.type, lastModified: file.lastModified, }) } if (valid.length > 0) { options.onDrop(valid) } }, [validateFile, options] ) return { isDragging, isDragOver, dropProps: { onDragEnter: handleDragEnter, onDragLeave: handleDragLeave, onDragOver: handleDragOver, onDrop: handleDrop, }, } } 

How to avoid flickering of the Drop zone with nested elements?

Use the dragCounter: increment on dragenter, decrement on dragleave. Only when the counter is zero, close the zone. This prevents false triggers when hovering over child elements inside the DropZone.

How to validate files and protect against path traversal?

Checking extensions and size is only half the job. The path obtained via file.path may be tampered with. In the main process, always use path.resolve(basePath, filePath) and check that the result does not escape the allowed directory. Our module includes a sanitizePath function that blocks access to /etc, /sys, and other system folders.

How long does it take to integrate Drag-and-Drop into an existing application?

Basic DropZone with validation—4–6 hours. With folder support, progress, IPC to main, safe path handling, and tests—2–3 working days. We integrate a ready-made module, which significantly saves budget compared to self-development. Get a consultation—we will assess your project in 1 business day.

Process: from analysis to deployment

Stage What we do Artifacts
Analysis Define supported formats, max size, folder scenarios Specification
Design Hook architecture, IPC scheme, error handling Diagram
Development Coding hook, DropZone component, IPC handlers Source code
Testing Unit tests on validation, E2E tests with puppeteer/electron 90% coverage
Deployment Integration into existing app, CI setup Package version

Comparison of approaches to implementing Drag-and-Drop

Approach Simplicity Security Folder support Performance
Native HTML5 + browser High Low (paths not available) No Medium
Electron IPC + contextBridge Medium High Yes (webkitGetAsEntry) High
Tauri Rust backend Low Very high Yes Very high

Our choice—Electron IPC, optimal balance of complexity and functionality for desktop applications.

What is included in the work

  • Ready-made component library: useFileDrop, DropZone, useFileUploadProgress
  • IPC handlers for the main process (read, copy, info)
  • Directory support via webkitGetAsEntry
  • Upload progress indication
  • Documentation and integration example
  • Team training (1 hour)

Our experience and guarantees

We have been involved in desktop development on Electron and Tauri for more than 5 years, implementing Drag-and-Drop for 15+ projects. Our solutions undergo code review and guarantee stability. Our useFileDrop hook works 2x faster thanks to the dragCounter and requires no additional dependencies. Contact us for integration of the ready-made solution.