File upload in Apex

Ginola

Does anyone know if there is a way for Apex to know if the .docx or .pdf uploaded in "File browser" is really .docx or .pdf  and does not have any other harmful code in it?

AndyH

Unfortunately not, APEX determines the mime type from the file extension.

You could use the ICAP settings within ORDS to virus scan the files.

jariola

You need separated virus scanner server

https://support.oracle.com/knowledge/Middleware/2665869_1.html

Or service

https://martinbnielsen.wordpress.com/2021/04/03/antivirus-service-for-apex/

AndyH

Unfortunately not, APEX determines the mime type from the file extension.

You could use the ICAP settings within ORDS to virus scan the files.

Ginola

@AndyH Just to be clear, ORDS itself does not have any virus scan features? Do I need a third-part application for that?

jariola

You need separated virus scanner server

https://support.oracle.com/knowledge/Middleware/2665869_1.html

Or service

https://martinbnielsen.wordpress.com/2021/04/03/antivirus-service-for-apex/

jariola

Btw, I just tested C-ICAP and ClamAV for virus scanning and write few steps about it

https://cloud.jaris.fi/ords/r/jaris/blog/post?p2_post_id=20210408172721693098

DARREN_J

Hi @jariola

I've managed to download clamav-0.104.1.linux.x86_64.rpm and installed on my Oracle Linux 7 box.

yum list *icap*

doesnt return any packages. From where can i download icap please?

Thanks

jariola

I haven't check Oracle Linux.

But in Ubuntu all can be found from repository. Here is blog post how setup C-ICAP and ClamAV for ORDS

https://cloud.jaris.fi/ords/r/jaris/blog/post?p2_post_id=20210408172721693098

DARREN_J

Hi, yeah your blog came up during a google search.

I have downloaded from sourceforge from reading this:

http://c-icap.sourceforge.net/download.html

Thanks

DARREN_J

Hi

So i have clamav installed. I can flashclam and clamscan a file.

I have unzipped and configured/make/make install

c_icap-0.5.10.tar.gz & c_icap_modules-0.5.5.tar.gz

# EDIT /usr/local/c-icap/etc/c-icap.conf

Include virus_scan.conf

ServiceAlias AVSCAN virus_scan?allow204=on&sizelimit=off&mode=simple

# EDIT /usr/local/c-icap/etc/virus_scan.conf

Include clamd_mod.conf

Start icap

/usr/local/c-icap/bin/c-icap -N -D -d 10

Run a virus scan

/usr/local/c-icap/bin/c-icap-client -i 127.0.0.1 -f /home/oracle/Downloads/file.txt -s AVSCAN

# ERROR

Access control: ALLOW

Registry 'virus_scan::engines' does not exist!

service arguments:allow204=on&sizelimit=off&mode=simple

And i cant work out how to use clamav_mod.conf as there is no clamav_mod.so which is linked to it.

Anybody know what's going on please?

DARREN_J

Hi @jariola

Can i just check with you please, On Ubuntu when you install libc-icap-mod-virus-scan from packages that you have a clamav_mod.conf and a clamav_mod.so file installed in /usr/local/?

I don't see a clamav_mod.so with the install of c_icap-0.5.10.tar.gz, c_icap_modules-0.5.5.tar.gz, or clamav-0.104.1.linux.x86_64.rpm which means i cant include clamav_mod.conf as the underlying clamav_mod.so file is missing.

Thanks

Darren

jariola

Currently I don't have access to system where is C-ICAP installed. I can make install to VirtualBox and check later.

But for me it sounds you have not build modules from source

https://sourceforge.net/p/c-icap/wiki/c-icap-modulesInstall/