Forum Discussion

Muhannad_64809's avatar
Muhannad_64809
Icon for Nimbostratus rankNimbostratus
Jul 09, 2017

Restrict file extensions upload.

Dears,

 

Is it possible to restrict the upload of the following file extensions via URL WebShell and allow all other extensions: 1- .PHP 2- .asp 3- .html

 

Looking forward to hearing form you.

 

Regards, Muhannad

 

ASM Advanced WAF
security
  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for MVP rankMVP
    Jul 10, 2017

    I believe this is to be done via ASM and is very limited with Irules. Refer the ASM Article here.

     

    Other dev-central Q&A.

     

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Jul 10, 2017

    Agree with @jaikumar_f5. ASM has attack signature to block specific file extension.

     

    Hi Expert, Please correct me, I am wrong. we have another idea to block file

     

    Can we use Java Script regular expression on client page (application side) to accept only valid file extension.