File types will be restricted to only those that are necessary for business functionality.

[ChasNelson1990]

File types will be restricted to only those that are necessary for business functionality.

Relates #36

[A-Souhei]

https://docs.ckan.org/en/2.9/maintaining/configuration.html?highlight=xml#datapusher-settings.

While it is possible to define the file format, it doesn't seem like there is a native way to block unwanted extensions from being uploaded, will continue investigation

[ChasNelson1990]

@A-Souhei what about using some sort of validator? We could add this as part of our fileupload JS code... but is there something built into CKAN too?

[A-Souhei]

@ChasNelson1990 We can probably use a combination of an existing extension like scheming with a custom validator. Although I am not sure how to do it clearly, it should be possible, I'll investigate more.

[A-Souhei]

May be https://github.com/data-govt-nz/ckanext-security ? Or overkill ?

[ChasNelson1990]

Wow, this really was a great find. I would 100% be interested in reading more and maybe trying this extension out.

[ChasNelson1990]

This came from a WHO Cybersecurity requirement - it may not be needed for ZaRR.