You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The concept of scanning for viruses is dead from a security perspective. Scanners (especially those that implment the file format they scan) introduce more code that opens up attack surface, also signature-based models are too slow in deployment to be of use.
Closing this. If somebody want's to implement something like that, have a look at whatever security-models are available for your webserver (in the case of apache, e.g mod_security)
Some form of AV checking for uploaded files before its available for everyone on the channel to open, if its flagged reject the upload.
Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.
The text was updated successfully, but these errors were encountered: