Forum Discussion
NimbostratusUnblocking CSV uploads
Hello,
We currently have a server that needs to upload CSV files. If the CSV is well formatted, the users want to be able to export anything from Excel and not get blocked. E.g. headers with ":", text like "sleep", etc.
On top of that, they sometimes have long file names, and big files (10 GB).
Do you have any advice to which rules put in place for this scenario? We don't want to create security risks, but in any case the CSV is being stored as text in an Elastic Search database.
Thank you in advance,
Artur
2 Replies
- zamroni777
MVP
the developers can implement compression via javascript etc., especially as the the file size is big.
compression will also make those texts to non printable characters that wont trigger sql injection or xss false positive.https://developer.mozilla.org/en-US/docs/Web/API/Compression_Streams_API#browser_compatibility
anyway, for such big file size, uploading to file server then app server reads from it seems more reliable.
- Aswin_mk
Hi,
In F5 Side we have to make changes in LTM to allow the big files and ASM to verify the csv file and disable the attack signature (. E.g. headers with ":", text like "sleep", etc.).
