Allowed File Extensions in Dossiers

By default, you can attach a file of any extension to a dossier. It is possible to strengthen your system safety by creating the allowlist of file extensions. It will prevent your users from uploading files of unwanted formats, including those that might contain hidden malicious code, such as .js, .swf, and such.

To create the allowlist of file extensions, do the following:

1. Open the /etc/findface-security/config.py configuration file.

   sudo vi /etc/findface-security/config.py
   

2. In the FFSECURITY section, find the DOSSIER_ATTACHMENTS_FILENAME_REGEXP parameter. Set an expression with the allowed file extensions. Any valid Python regular expression will do.

   Examples:

   • r'.*\.png': allows only files with the .png extension

   • r'.*\(png|jpg)': allows the .png and .jpg extensions

   • r'.*': allows all file extensions

   • None/commented parameter: allows all file extensions

   • XXXXXX: uploading files of any extension is prohibited

   FFSECURITY = {
      ...
      'DOSSIER_ATTACHMENTS_FILENAME_REGEXP': r'.*\.txt',
      ...
   
      }
   

3. Restart the findface-security service.

   sudo systemctl restart findface-security.service