bsed / ala

Automatically exported from code.google.com/p/ala
0 stars 0 forks source link

Should not be able to load documents of type .exe #444

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
Can currently successfully load executable files and other potentially 
malicious files via the document loader. 
Need to prevent loading of known problem extensions and possibly also have a 
preload virus scan of acceptable types (eg. .doc, .xls, and ..x versions of 
these) which support macros.

Original issue reported on code.google.com by CoolDa...@gmail.com on 12 Dec 2013 at 11:15

GoogleCodeExporter commented 9 years ago
Simple thing to do now is to support a blacklist (or whitelist) of supported 
extensions.

Original comment by moyesyside on 12 Dec 2013 at 11:38

GoogleCodeExporter commented 9 years ago
checking for file extensions added. Virus checking is considerably more work 
and not achievable for 1 st Jan. Something to look into next year. Downgrading 
to Medium for now.

Original comment by moyesyside on 13 Dec 2013 at 4:45