What steps can be taken to prevent the uploading of executable files in Alfresco Share?

Question

What steps can be taken to prevent the uploading of executable files in Alfresco Share?

Is there a way to prevent users from uploading executable files such as .exe and .msi files directly into Alfresco Share?

I am looking for a solution that will restrict the upload of executable files in Alfresco Share right at the moment of upload, rather than relying on a rule to delete them afterwards. Any suggestions or guidance would be greatly appreciated.

javascript web-scraping alfresco alfresco-share

Answer 1

Answer №1

Within the upload.js file on the client-side, similar to flash-upload.js, there exists a method called setFileFilters. This method retrieves information from both this.showConfig.filter and the object itself.

The file description states:

*    filter: {array},         // limits what kind of files the user can select in the OS file selector

I have utilized this method to allow clients to upload different file types when uploading a new version.

Please add .exe to the filter array (refer to it first, as I do not remember the exact syntax).

For additional information, please refer to this link.

However, this does not completely prevent users from uploading executable files. They can still use * in their query or utilize drag-drop, webdav/cifs, or another client.

If you wish to fully disable this functionality, you can create a Java Behaviour that triggers the onCreateNode Policy. Check the content's mimetype upon addition and remove it if necessary.

Answer 2

Within the upload.js file on the client-side, similar to flash-upload.js, there exists a method called setFileFilters. This method retrieves information from both this.showConfig.filter and the object itself.

The file description states:

*    filter: {array},         // limits what kind of files the user can select in the OS file selector

I have utilized this method to allow clients to upload different file types when uploading a new version.

Please add .exe to the filter array (refer to it first, as I do not remember the exact syntax).

For additional information, please refer to this link.

However, this does not completely prevent users from uploading executable files. They can still use * in their query or utilize drag-drop, webdav/cifs, or another client.

If you wish to fully disable this functionality, you can create a Java Behaviour that triggers the onCreateNode Policy. Check the content's mimetype upon addition and remove it if necessary.

Answer 3

Answer №2

After encountering the same issue, I came across a helpful solution in the form of Alfresco: Mime Type Blocker created by Angel Borroy.

Within Alfresco, all file formats are supported with no built-in restrictions on allowed MIME types. This means that executables, databases, and potentially harmful content can be stored without limitations.

This add-on offers an Alfresco extension to establish a mime type blacklist within alfresco-global.properties and introduces an aspect called Mime Type Restrictable for determining which folders will enforce this restriction.

The process involves defining a blacklist of blocked mime types by configuring a variable in the alfresco-global.properties file:

## Samples
## STARTS WITH video = video*
##   ENDS WITH xml   = *xml 
##    CONTAINS pdf   = *pdf*
##    EXACTLY ONE    = application/octet-stream
## MANY (use pipes)  = application/octet-stream|application/zip|video*
mimetypes.restricted.expression=video*

Additionally,

Using the default Alfresco Share folder action 'Manage Aspects', the Mime Type Restrictable aspect can be applied to designated folders as needed.

This allows you to specify where the rule should be enforced.

EDIT 2016-05-27

I also discovered an alternative method based on rules:

To begin, create a simple javascript webscript named block-document.js designed to throw an exception:

function main()
{
    var name = document.name;
    var siteName = document.siteShortName;
    var parent = document.parent;
    throw "Unsupported file format";
}
main();

Then upload it via Alfresco Share into the

Repository>Data Dictionary>Scripts

directory.

https://i.sstatic.net/RKwBM.png

To apply a rule to a folder (and potentially its subfolders), select the desired folder and navigate to the Folder Actions menu to choose Manage Rules.

https://i.sstatic.net/IYRrP.png

You can then create a rule that triggers the previously uploaded script when adding a new document with specific mime type(s) to the folder.

https://i.sstatic.net/CY674.png

This approach offers the advantage of being able to apply the rule to subfolders simply by checking a checkbox option, while applying the aspect to each individual folder was required in the previous method.

Users uploading documents will immediately receive a warning if the file is not successfully added to the repository, regardless of their chosen upload method.

Answer 4

After encountering the same issue, I came across a helpful solution in the form of Alfresco: Mime Type Blocker created by Angel Borroy.

Within Alfresco, all file formats are supported with no built-in restrictions on allowed MIME types. This means that executables, databases, and potentially harmful content can be stored without limitations.

This add-on offers an Alfresco extension to establish a mime type blacklist within alfresco-global.properties and introduces an aspect called Mime Type Restrictable for determining which folders will enforce this restriction.

The process involves defining a blacklist of blocked mime types by configuring a variable in the alfresco-global.properties file:

## Samples
## STARTS WITH video = video*
##   ENDS WITH xml   = *xml 
##    CONTAINS pdf   = *pdf*
##    EXACTLY ONE    = application/octet-stream
## MANY (use pipes)  = application/octet-stream|application/zip|video*
mimetypes.restricted.expression=video*

Additionally,

Using the default Alfresco Share folder action 'Manage Aspects', the Mime Type Restrictable aspect can be applied to designated folders as needed.

This allows you to specify where the rule should be enforced.

EDIT 2016-05-27

I also discovered an alternative method based on rules:

To begin, create a simple javascript webscript named block-document.js designed to throw an exception:

function main()
{
    var name = document.name;
    var siteName = document.siteShortName;
    var parent = document.parent;
    throw "Unsupported file format";
}
main();

Then upload it via Alfresco Share into the

Repository>Data Dictionary>Scripts

directory.

https://i.sstatic.net/RKwBM.png

To apply a rule to a folder (and potentially its subfolders), select the desired folder and navigate to the Folder Actions menu to choose Manage Rules.

https://i.sstatic.net/IYRrP.png

You can then create a rule that triggers the previously uploaded script when adding a new document with specific mime type(s) to the folder.

https://i.sstatic.net/CY674.png

This approach offers the advantage of being able to apply the rule to subfolders simply by checking a checkbox option, while applying the aspect to each individual folder was required in the previous method.

Users uploading documents will immediately receive a warning if the file is not successfully added to the repository, regardless of their chosen upload method.

What steps can be taken to prevent the uploading of executable files in Alfresco Share?

Answer №1

Answer №2

Similar questions

How can we ensure that the load more button disappears at the appropriate moment in this Vue 3 application?

"Looking for a datetime picker plugin that works well with Bootstrap

Python and JavaScript fundamental interaction

Is there a way to adjust the position of a Bootstrap 5 dropdown menu in real-time using javascript or jQuery?

Arrange images with haphazard placement

Creating a shimmering glow for a dynamic AJAX div block in real-time

Can anyone provide guidance on extracting HTML elements from a stream of objects within rxjs?

Encountering issues with link functionality on homepage due to React-Router v6 and Material-UI Tab integration

Retrieving the data from an Angular website using a curl command

What is a common mistake when using refs in React?

Utilizing Python Selenium to Extract Data from Response in DevTools

Using AJAX to send data from knockout observables to the server in JSON format

developing collections of objects in javascript

Separate every variable with a comma, excluding the final one, using jQuery

AngularJS Filter without creating a new object

How to Handle Tab Navigation on a Mobile Website without Javascript?

What is the best way to implement a function on every item within a specific class?

Turning off a hyperlink with jQuery

To ensure font-weight is applied to innerHTML text on Laravel, it must be styled with a white color for the changes to take

Secure login using AngularJS