Incorrect file type causing HTTP 403 error

[griffin]

When my company's software tries to upload a file that has the wrong extension (in this case, a PNG file with a .jpg extension), Octane gives an HTTP 403 Forbidden error in response. Can someone confirm that this is the correct behaviour, and if so, is there any way to override it and upload the file anyway?

[alex-shnayder · Accepted solution]

Indeed this is the correct behavior, this is part of the security features of the product.

If you want to allow this specific operation (of uploading a png with a jpg extension) you need to update EXTENSION_TO_MIME_TYPE site parameter by adding to it 

jpg=image/png

see details at https://admhelp.microfocus.com/octane/en/latest/Online/Content/AdminGuide/params.htm

[griffin]

That worked! Thank you very much.

[Dirk Hedderich]

Hi,

Yes, this thread is a bit older - but perhaps someone might find it useful 😉

The very latest Octane release 12.60.41 (SaaS) has a new parameter VALIDATE_MIME_TYPE_MATCH_TO_EXTENSION which you could use to disable validation. Should be available in the next on premise release as well.

Regards,

Dirk