FuseGuard Logo

fuseguard.components.filters
Component FileUploadFilter

filters.BaseFilter
  |
  +--filters.FileUploadFilter

Checks the File Extensions of Uploaded file and matches them against a whitelist or blacklist.

Method Summary
public array getConfigurables()
          Returns a list of configurable properties
public string getDescription()
public string getName()
public string getThreatCategory()
          Returns path-traversal
public numeric inspectRequest()
public void setAllowedFileExtensions([string extensionList="*"])
          Set a comma seperated list of allowed file extensions, or use * to allow all. If * is not used any file extension not in the list causes the filter to respond with a threat level of 10.
public void setDeniedFileExtensions([string extensionList="*"])
          Set a comma seperated list of denied file extensions. If a file extension in this list is found the filter responds with a threat level of 10.

Methods inherited from filters.BaseFilter
inspectsCookieScope, logEnabled, inspectsFormScope, inspectsRequestBody, setFilterWhitelist, setFilterInstanceName, getFilterLevel, getLogLevel, setScopes, getRequestLogMessage, allowURI, inspectsURI, ignoreURI, inspectsRequest, inspectsCGIScope, setIgnoreVariableList, getHelp, getRequestLogMessageDetail, setAllowDenyOrder, getIPWhiteListID, setRequestLogMessage, init, setFilterLevel, filterRequest, blockEnabled, getFilterID, inspectsUrlScope, inspectVariable, getFirewall, setAllowURIList, filterEnabled, filterVariables, logOnly, getFilterInstanceName, getFilterComponent, getIPWhiteListProvider, setIgnoreURIList, setFilterID, getBlockLevel, ignoreVariable, denyURI, inspectResponse, hasIPWhiteList, setLogLevel, inspectVariables, setBlockLevel, ignoresVariable
 

Method Detail

getConfigurables

public array getConfigurables()
Returns a list of configurable properties


getDescription

public string getDescription()

getName

public string getName()

getThreatCategory

public string getThreatCategory()
Returns path-traversal


inspectRequest

public numeric inspectRequest()

setAllowedFileExtensions

public void setAllowedFileExtensions([string extensionList="*"])
Set a comma seperated list of allowed file extensions, or use * to allow all. If * is not used any file extension not in the list causes the filter to respond with a threat level of 10.

Parameters:
[string extensionList="*"]

setDeniedFileExtensions

public void setDeniedFileExtensions([string extensionList="*"])
Set a comma seperated list of denied file extensions. If a file extension in this list is found the filter responds with a threat level of 10.

Parameters:
[string extensionList="*"]