Re: Content monitorting in Application Security

[Ivan Ristic <ivanr () webkreator com>]

Ofer Shezaf wrote:
> Do you think that matching extension and content type header would be
> enough? If no, are you aware of any technology to determine a file type
> according to its content?

  No. The extension and the content type are provided by the client,
  therefore they cannot be trusted. You have to look into the file
  to verify it.

--
Ivan Ristic (http://www.modsecurity.org)