For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Akhtar_109015's avatar
Akhtar_109015
Icon for Nimbostratus rankNimbostratus
May 01, 2014

ASM

Hello All,   Is there any way to restrict file types to be uploaded tied to specific parameter ? So our website is having a Resume upload field, so I want to know if I can limit the files types re...
ASM Advanced WAF
deployment
security
mimlo_61970's avatar
mimlo_61970
Icon for Cumulonimbus rankCumulonimbus
May 05, 2014

I do not have an answer to your question, but the Allowed file types you are modifying deal specifically with the file type of the request(from the GET, POST method header) and not the file type of something that is uploaded to the site(which is probably a form field variable or something else in the data portion of the request)

 

This is why when you removed aspx it broke, but adding it back fixes it, but allows any file type to be uploaded.