Whitelisting Attachment Extensions on a self hosted instance

Rory Duncan

We are having an issue trying to add an extension to the whitelist in the admin tool on a self hosted instance of Jama. Specifically we need to add the ".compare" extension. We have done so in the way we have added other extensions in the past, but we continue to get an error message, (this example is not for the .compare, but it is the same error for .compare)

We have tried this:

Note that compare is in the list, and we added abcdefg. We seem to have narrowed this down to extensions of a certain length are not allowed. "pages" works with a length of 5 characters, but compare and abcdefg do NOT work.

We also tried this as lots of the data we can find on this subject has all the extensions in ", though the admin tool does not by default.

Is there something magic we need to do to get .compare files to be whitelisted in? 

Thanks,

[Deleted User]

Hi Rory, 

What version of Jama Connect are you using, and are you logged in as the root user when attempting to add file extensions to the allowlist?

Rory Duncan

Sorry, forgot that part .
Jama Connect 8.66.1

Im checking with my admins on the second. I assume Yes since it doesnt give an error when they do it... But ill let you know once I confirm. Like I said above, we have added others successfully in the past, and during this particular troubleshooting event...

Alessandro Valli

In my understanding the allowed file extensions are limited to known MIME types -> see CONFIGURE GENERAL PROPERTIES (note for Attachment file extensions)

Rory Duncan

I did verify with our admin they are logged in as root.

------------------------------
Rory Duncan
NASA
Kennedy Space Center FL
------------------------------
-------------------------------------------
Original Message:
Sent: 08-24-2022 16:13
From: Carly Rossi
Subject: Whitelisting Attachment Extensions on a self hosted instance

Hi Rory, 

What version of Jama Connect are you using, and are you logged in as the root user when attempting to add file extensions to the allowlist?

------------------------------
Carly Rossi // she/her
Community Manager // Jama Software
Portland, OR
------------------------------

Original Message:
Sent: 08-19-2022 09:31
From: Rory Duncan
Subject: Whitelisting Attachment Extensions on a self hosted instance

We are having an issue trying to add an extension to the whitelist in the admin tool on a self hosted instance of Jama. Specifically we need to add the ".compare" extension. We have done so in the way we have added other extensions in the past, but we continue to get an error message, (this example is not for the .compare, but it is the same error for .compare)

We have tried this:

Note that compare is in the list, and we added abcdefg. We seem to have narrowed this down to extensions of a certain length are not allowed. "pages" works with a length of 5 characters, but compare and abcdefg do NOT work.

We also tried this as lots of the data we can find on this subject has all the extensions in ", though the admin tool does not by default.

Is there something magic we need to do to get .compare files to be whitelisted in? 

Thanks,

------------------------------
Rory Duncan
NASA
Kennedy Space Center FL
------------------------------

Rory Duncan

So do we think that blanking out the line will allow ALL types through? Not sure that's a great implementation, but maybe...
quoting from that link: "Files are rejected if the content of the file doesn't match the file extension, or if the MIME type is not understood by the system, even if the file type is listed here. To allow files of an unknown type, set the option to a blank string."

------------------------------
Rory Duncan
NASA
Kennedy Space Center FL
------------------------------
-------------------------------------------
Original Message:
Sent: 09-05-2022 04:09
From: Alessandro Valli
Subject: Whitelisting Attachment Extensions on a self hosted instance

In my understanding the allowed file extensions are limited to known MIME types -> see CONFIGURE GENERAL PROPERTIES (note for Attachment file extensions)

------------------------------
Alessandro
Systems Engineer
SICK AG
------------------------------

Original Message:
Sent: 08-19-2022 09:31
From: Rory Duncan
Subject: Whitelisting Attachment Extensions on a self hosted instance

We are having an issue trying to add an extension to the whitelist in the admin tool on a self hosted instance of Jama. Specifically we need to add the ".compare" extension. We have done so in the way we have added other extensions in the past, but we continue to get an error message, (this example is not for the .compare, but it is the same error for .compare)

We have tried this:

Note that compare is in the list, and we added abcdefg. We seem to have narrowed this down to extensions of a certain length are not allowed. "pages" works with a length of 5 characters, but compare and abcdefg do NOT work.

We also tried this as lots of the data we can find on this subject has all the extensions in ", though the admin tool does not by default.

Is there something magic we need to do to get .compare files to be whitelisted in? 

Thanks,

------------------------------
Rory Duncan
NASA
Kennedy Space Center FL
------------------------------

[Deleted User]

Hi Rory, 

Resetting the Attachment File Extensions section to a blank string resets to the Jama Connect allowlist default extensions, so it may not be the most feasible solution here. Do you know if the Ignore unknown MIME types section below the Attachment File Extensions box is showing as Yes or as No? 

------------------------------
Carly Rossi // she/her
Community Manager // Jama Software
Portland, OR
------------------------------
-------------------------------------------
Original Message:
Sent: 10-03-2022 09:51
From: Rory Duncan
Subject: Whitelisting Attachment Extensions on a self hosted instance

So do we think that blanking out the line will allow ALL types through? Not sure that's a great implementation, but maybe...
quoting from that link: "Files are rejected if the content of the file doesn't match the file extension, or if the MIME type is not understood by the system, even if the file type is listed here. To allow files of an unknown type, set the option to a blank string."

------------------------------
Rory Duncan
NASA
Kennedy Space Center FL
------------------------------

Original Message:
Sent: 09-05-2022 04:09
From: Alessandro Valli
Subject: Whitelisting Attachment Extensions on a self hosted instance

In my understanding the allowed file extensions are limited to known MIME types -> see CONFIGURE GENERAL PROPERTIES (note for Attachment file extensions)

------------------------------
Alessandro
Systems Engineer
SICK AG

Original Message:
Sent: 08-19-2022 09:31
From: Rory Duncan
Subject: Whitelisting Attachment Extensions on a self hosted instance

We are having an issue trying to add an extension to the whitelist in the admin tool on a self hosted instance of Jama. Specifically we need to add the ".compare" extension. We have done so in the way we have added other extensions in the past, but we continue to get an error message, (this example is not for the .compare, but it is the same error for .compare)

We have tried this:

Note that compare is in the list, and we added abcdefg. We seem to have narrowed this down to extensions of a certain length are not allowed. "pages" works with a length of 5 characters, but compare and abcdefg do NOT work.

We also tried this as lots of the data we can find on this subject has all the extensions in ", though the admin tool does not by default.

Is there something magic we need to do to get .compare files to be whitelisted in? 

Thanks,

------------------------------
Rory Duncan
NASA
Kennedy Space Center FL
------------------------------