Ques/Help Safe Attachment Extensions Vs. Risky?

P

ProCom

Guest
For the setting: "Allowed attachment file extensions"

For those of us that aren't developers (me :) ) how do we determine the risk-level of different extensions to allow?

zip ?
csv ?
pdf ?
txt ?
xlxs ?
etc?

How "safe" or "risky" are those (and other) extensions to allow uploads?

I read the interwebs about Malware Infection, Injection Attacks, etc. etc. etc.

I want to support uploads to some extent, but not anything where a hacker could super easily cause problems.

Thanks!

Continue reading...