Description
This repository provides a library designed to make file uploads in DataFlex applications more secure.
The library introduces multiple layers of protection to ensure that only safe and valid files are accepted by the application. By default, all uploaded files are first scanned using Windows Defender to detect potential malware before any further processing takes place.
To prevent race conditions and stability issues during the upload process, it is required to exclude the Data/Temp directory from Windows Defender scanning. This ensures reliable handling of files while maintaining overall system security.
After the initial malware scan, each file is analyzed using the File (libmagic) library to determine its actual file type. If the detected file type does not match an allowed or valid type, the upload is immediately rejected, regardless of file extension.
The library then enforces additional validation rules, including:
- Maximum file size checks
- Allowed file extension verification
Only after all security checks have passed is the file accepted and safely stored on the server, for example by moving it to the Data/Uploads directory.
This layered approach significantly reduces the risk of malicious or malformed files being uploaded, providing a robust and reliable solution for secure file handling in DataFlex applications.