Episerver forms - File upload element stores dangerous blacklisted files



Iam using the episerver forms file upload element and noticed that even when a file is denied upload by being on the extensions blacklist it is still uploaded and stored by episerver. 

The validation works like it should as it stops the form submit correctly and does not send out an email or show the submit in the submissions tab on the form, So why is the file still stored? It does not feel safe to have .exe files and .dll files stored around in the blobs folder.

How can i make episerver validation delete the files that bounce on validation?

Aug 07, 2017 15:51
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.