Forum Discussion

Muhannad_64809's avatar
Muhannad_64809
Icon for Nimbostratus rankNimbostratus
Jul 09, 2017

Restrict file extensions upload.

Dears,

 

Is it possible to restrict the upload of the following file extensions via URL WebShell and allow all other extensions: 1- .PHP 2- .asp 3- .html

 

Looking forward to hearing form you.

 

Regards, Muhannad

 

4 Replies

  • I believe this is to be done via ASM and is very limited with Irules. Refer the ASM Article here.

     

    Other dev-central Q&A.

     

  • Agree with @jaikumar_f5. ASM has attack signature to block specific file extension.

     

    Hi Expert, Please correct me, I am wrong. we have another idea to block file

     

    Can we use Java Script regular expression on client page (application side) to accept only valid file extension.