I'm developing a fairly conventional 4.0 web app with some equally conventional code to upload files to a varbinary(max) field in a sql database. Frankly we're not dealing with anything exciting. The users will mostly be authenticated through Active Directory
and the most of the machines used will be within a firewall. The most common file will probably be a Doc or a JPEG.
However I'm feeling just a little paranoid. We have hard-coded the app to prevent uploading of EXE files but I wonder if I should do more.
I just found this little gem. http://www.ttu.edu/safecomputing/lubbock/recommended/fileextensions.php
Is this an up-to-date list of potentially dangerous files or does someone have better?
...
Go to the complete details ...