Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-123226

Verify possible security issues related to files uploaded by Guest user

    Details

    • Type: Spike
    • Status: Closed
    • Priority: Minor
    • Resolution: Completed
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Forms
    • Labels:
      None
    • Spike Type:
      Technical
    • Sprint:
      Forms_7.4_03

      Description

      There are two Acceptance Criteria restricting the files which will be uploaded by a Guest user, e.g. restricting the file extension and the file size. This Spike aims to answer the following questions:

      1. What is the ideal maximum size of a file being uploaded by a Guest user? (Suggestion: check how Documents and Media handles this use case, more details on System Settings > Documents and Media > Maximum File Size.)
      2. What should be the allowed file extensions of a file being uploaded by a Guest user?
      3. Should these both restrictions be configurable by the users?

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              carolina.barbosa Carolina Barbosa
              Reporter:
              renato.rego Renato RĂªgo
              Engineering Assignee:
              Carolina Barbosa
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Packages

                  Version Package