mahara-contributors team mailing list archive

[François Marier <francois@xxxxxxxxxx>]

Public bug reported:

Clamav currently allows Mahara to reject uploads which contain viruses.

We should extend this framework to be able to run sanity checks based on
the mimetype of the uploaded files.

For example, we may want to:

- validate PNG and JPG images and reject invalid ones
- check whether or not Word documents contain macros and reject them
- only allow PDFs without any scripts in them

** Affects: mahara
     Importance: Wishlist
         Status: Triaged


** Tags: security

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/785465

Title:
  Extend the clamav check to ensure sanity of each file type

Status in Mahara ePortfolio:
  Triaged

Bug description:
  Clamav currently allows Mahara to reject uploads which contain
  viruses.

  We should extend this framework to be able to run sanity checks based
  on the mimetype of the uploaded files.

  For example, we may want to:

  - validate PNG and JPG images and reject invalid ones
  - check whether or not Word documents contain macros and reject them
  - only allow PDFs without any scripts in them