File and resources

The file and resources category ensures applications handle untrusted file data securely and store untrusted data from untrusted sources with limited permissions in an appropriate location.

This includes controls such as avoiding denial of service through large or unexpected file types, validating file type and preventing against path traversal.

• Disallow infected file download
  Control whether users can download non-scanned attachments if the antivirus service is down or unreachable.
• Enable email spam scoring and filtering
  Install the Email Filter (com.glide.email_filter) plugin to install email filtering within the instance. This filtering identifies existing headers, which enables you to decide what to do with the email based on the associated header. Alternatively, set com.glide.email_filter to false.
• Enable antivirus scan
  The com.glide.snap.enable_scan property activates the antivirus scan functionality.
• Restrict downloadable files types in static content [Updated in Security Center 1.3]
  Use the glide.ui.strict_customer_uploaded_static_content property to enable restrictions on the file types that can be downloaded when they have been uploaded using the Upload File functionality.
• Limit attachment size in training and prediction flows for GraphQL endpoints [New in Security Center 1.3 and updated in 1.5]
  The glide.platform_ml_di.max_attachment_size_graphql property controls the maximum allowed size limit for returning attachments in GraphQL endpoints of training or prediction flows.
• Limit attachment size in training and prediction flows [New in Security Center 1.3 and updated in 1.5]
  The glide.platform_ml_di.max_attachment_size property controls the maximum allowed size limit for returning attachments in training and prediction flows.
• Limit HTTP response body size [New in Security Center 1.3 and updated in 1.5]
  Configure the glide.http.response.get_body.limit.enabled and glide.http.response.get_body.limit properties to protect your instance against OutOfMemoryExceptions.
• Limit maximum number of attachments in email
  Configure the number of inbound email attachments allowed per Email [sys_email] record on your instance.
• Maximum allowed attachment size
  Configure the com.glide.attachment.max_size property to control the maximum size (in megabytes) permitted for an uploaded attachment.
• Validate file mime type in AttachmentCreator soap web service [New in Security Center 1.3 and updated in 1.5]
  The glide.attachment.enforce_security_validation property determines whether Multipurpose internet Mail Extensions (MIME) files undergo validation.
• Validate MIME Type of Attachments from Inbound Emails
  Use a system property to validate attachments uploaded from inbound emails.

Parent Topic:Hardening settings