Forum Discussion

Muhannad_64809's avatar
Muhannad_64809
Icon for Nimbostratus rankNimbostratus
8 years ago

Restrict file extensions upload.

Dears,

 

Is it possible to restrict the upload of the following file extensions via URL WebShell and allow all other extensions: 1- .PHP 2- .asp 3- .html

 

Looking forward to hearing form you.

 

Regards, Muhannad

 

4 Replies

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for Noctilucent rankNoctilucent
    8 years ago

    I believe this is to be done via ASM and is very limited with Irules. Refer the ASM Article here.

     

    Other dev-central Q&A.

     

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    8 years ago

    Agree with @jaikumar_f5. ASM has attack signature to block specific file extension.

     

    Hi Expert, Please correct me, I am wrong. we have another idea to block file

     

    Can we use Java Script regular expression on client page (application side) to accept only valid file extension.