Breaking SAP Portal - Proidea

Malicious file upload: Prevention
• Enable File Extension and Size Filter.
• System Administration → System Configuration → Content Management →
Repository → Filters → Show Advanced Options → File Extension and Size Filter
• you must select either the All repositories parameter, or at least one repository
from the repository list in the Repositories parameter. Otherwise, the filter is not
created.
• Enable Malicious Script Filter.
• System Administration → System Configuration → Content Management →
Repository → Filters → Show Advanced Options → Malicious Script Filter
• the filter also detects executable scripts in files that are being modified and
encodes them when they are saved
• enable Forbidden Scripts. Comma-separated list of banned script tags that will
be encoded when the filter is applied.
• enable the Send E-Mail to Administrator option.