+APP.3.1.A4 Controlled Integration of Files and Content (B)

APP.3.1.A4 Controlled Integration of Files and Content (B)

If a web application or web service offers an upload function for files, this function MUST be restricted as far as possible by the IT Operation Department. In particular, the allowed file size, file types, and storage locations MUST be defined. The users allowed to use the upload function MUST be defined. Access and execution rights MUST also be set restrictively. Furthermore, it MUST be ensured that a user can save files only in the specified storage location.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.43 Attack with Specially Crafted Messages