Secure file field, which allows you to restrict uploaded file extensions. It may be useful for user-uploaded files (attachments).
This package adds model and forms field. What this fields does:
restricts allowed file extensions (for example: only *.pdf files)
checks file extensions is correct for sent content-type
checks sent content type is correct for file content (detects by libmagic)
checks uploaded file with anti-virus software
This project continues https://github.com/rvause/django-safe-filefield.
Installation
The package can be installed using:
pip install django-safe-filefield-newAdd the following settings:
INSTALLED_APPS += [
'safe_filefield',
]django-safe-filefield-new requires libmagic to be installed.
Usage
Simply add field to your model:
from safe_filefield.models import SafeFileField
class MyModel(models.Model):
attachment = SafeFileField(
allowed_extensions=('xls', 'xlsx', 'csv')
)Or directly to your form:
from safe_filefield.forms import SafeFileField
class MyForm(forms.Form):
attachment = SafeFileField(
allowed_extensions=('xls', 'xlsx', 'csv')
)Content type checking
To check actual file content type, use check_content_type argument. This will prevent attacker from uploading malicious file just by changing its extension.
class MyForm(forms.Form):
attachment = SafeFileField(
check_content_type=True
)ClamAV support
This package has ability to check uploaded file with ClamAV antivirus.
To use anti-virus protection simply enable it in your form or model definition:
from safe_filefield.forms import SafeFileField
class MyForm(forms.Form):
attachment = SafeFileField(
scan_viruses=True,
)You can configure some ClamAV settings:
CLAMAV_SOCKET = 'unix://tmp/clamav.sock' # or tcp://127.0.0.1:3310
CLAMAV_TIMEOUT = 30 # 30 seconds timeout, None by default which means infiniteContributing
If you have any valuable contribution, suggestion or idea, please let me know as well because I will look into it.
Pull requests are welcome.
1 maintainer
Metadata
1 maintainer
Release files for django-safe-filefield-new 0.4.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| django-safe-filefield-new-0.4.1.tar.gz | 4.6 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| django_safe_filefield_new-0.4.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 11.5 kB
Release files / django-safe-filefield-new-0.4.1.tar.gz
| Download URL | django-safe-filefield-new-0.4.1.tar.gz |
|---|---|
| Size | 4.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
d5ace4f6985de5e566ba6db7b8141b2ff9f8e23b36300d3e3fa2d9cf29e1c9b5
|
|
BLAKE2b-256 checksum How to use checksums |
9a270a983ab05848ae03e437c088fd98925564af59ce71058c7130ebc680936e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.1 CPython/3.7.13
|
Release files / django_safe_filefield_new-0.4.1-py3-none-any.whl
| Download URL | django_safe_filefield_new-0.4.1-py3-none-any.whl |
|---|---|
| Size | 6.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f39e652afe96a82d04d91c253ef426707dd472e00561a6072a3c22c7a7aa68f4
|
|
BLAKE2b-256 checksum How to use checksums |
2f3d179d3ec2b27770f73f0b0c2ba10bac14e3d271ae9a02fff7d746e562f307
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.1 CPython/3.7.13
|
