For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Akhtar_109015's avatar
Akhtar_109015
Icon for Nimbostratus rankNimbostratus
May 01, 2014

ASM

Hello All,

 

Is there any way to restrict file types to be uploaded tied to specific parameter ? So our website is having a Resume upload field, so I want to know if I can limit the files types restriction to Resume upload field on the website ?

 

I restricted the file types (*.doc & *.pdf) using below option but our website page (URL had .aspx) stopped working, since I am not allowing .aspx in this, but If I allow .aspx extension the webpage starts working.

 

Application Security---->File Types---->Allowed file types

 

Regards,

 

Akhtar

 

ASM Advanced WAF
deployment
security

1 Reply

  • mimlo_61970's avatar
    mimlo_61970
    Icon for Cumulonimbus rankCumulonimbus
    May 05, 2014

    I do not have an answer to your question, but the Allowed file types you are modifying deal specifically with the file type of the request(from the GET, POST method header) and not the file type of something that is uploaded to the site(which is probably a form field variable or something else in the data portion of the request)

     

    This is why when you removed aspx it broke, but adding it back fixes it, but allows any file type to be uploaded.