Forum Discussion
cdjac0bsen
Nimbostratus
Apr 11, 2018file upload on parameter: Ignore Value or File Upload, which is better or appropriate?
We have an app that allows document uploads using a parameter. If a user uploads an html doc, for example, it trips 10's of attack signatures. It isn't practical to disable each signature because m...
boneyard
MVP
Apr 18, 2018yeah, you will probably be disabling attack signatures forever.
there isn't the right way, it depends a lot on internal rules and how strict you wanna be.
so if you want to not think about it, ignore value. if you want some control file upload (it helps against uploading executables for example: https://support.f5.com/csp/article/K90728313)
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects