It is possible to define a blacklist for not allowed file extensions and a whitelist for allowed file extensions of uploaded files for certain areas (listed below).

You can create general lists that are valid for all areas or lists that are valid for specific areas.

Blacklist (general)

Create the configuration file ./etc/admin/datawizard/upload_blacklist.properties.

Example

upload_blacklist.properties

.sh
.exe
.cmd

Whitelist (general)

Create the configuration file ./etc/admin/datawizard/upload_whitelist.properties an. The content of the file is structured like the blacklist.

If a whitelist exists, the blacklist is ignored.

Lists for specific areas

Specific lists for certain areas can also be generated. These lists then have priority over the general blacklist and whitelist.

./etc/admin/datawizard/upload_blacklist_<area>.properties

./etc/admin/datawizard/upload_whitelist_<area>.properties

Area	Description
config	See section Configuration files (administration).
extlib	See section ./extlib.
form	See section Formatting via attribute "DataCockpit control".
profiles	See sections Restart dialogue and Start process . Important note: There are separate files for this: ./etc/webmonitor/upload_blacklist.properties ./etc/webmonitor/upload_blacklist_<Bereich>.properties ./etc/webmonitor/upload_whitelist.properties ./etc/webmonitor/upload_whitelist<Bereich>.properties
rules	See section Rule definitions (administration).
tm	See section Configuration files (Transport Manager).
upload	See section File upload.
workflow	See section Workflow files.