Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-11226

Better Strict Content Type Validation

    XMLWordPrintable

Details

    • Story
    • Resolution: Unresolved
    • Major
    • None
    • 3.0.0
    • CMA, Repository

    Description

      Background
      There are zillions of file types unknown to us, but as strict content type validation is on by default, we will (and do) reject many things customers use.

      Acceptance

      • Refine strict content type validation so that it only rejects known mismatches (you said 'X', but it looks like 'Y'), and allows unknowns in (you said it's 'X'/nothing, but I'm not sure what it is)
      • Make it easy for customers to add content type overrides (e.g. for situations where they've made their own content types)
        • Presumably those overrides should be in sonatype-work

      Attachments

        Issue Links

          fixes

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-11712 RAR uploading fails - Detected content type "x-zip-compressed" but expected "/x-rar"

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-13076 Nexus proxy of maven npanday exe artifact fails

          • Major - Major loss of function.
          • Closed
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-20688 Cannot upload .pdb files due to incorrect content type

          • Major - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-29524 Failed to detect and upload OCX DMG files to Nexus Repo Raw Repository - Detected content type with content type validation

          • Major - Major loss of function.
          • New

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-30826 Windows Image Format .WIM files fail strict content type validation

          • Major - Major loss of function.
          • New

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-16252 disable mime type validation by default for RAW proxy repos

          • Major - Major loss of function.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-31346 Content-Type of a npm tgz is showing as "application/gzip" instead of "application/x-tgz".

          • Major - Major loss of function.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-16306 JAR-artifacts that have been repackaged by Spring Boot are not recognized as application/java-archive and are not delivered from a proxy repository with default configuration

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. NEXUS-18846 Cannot add custom MIME types for Strict Content Type Validation

          • Major - Major loss of function.
          • New
          relates

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-37810 strict content validation may fail on exe application/x-sharedlib protobuf protoc

          • Major - Major loss of function.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-29200 eot file type incorrectly detected as text/plain

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-10243 Content type exception uploading tar files - identified as application-gtar instead of application/tar

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-18269 Cannot deploy a Spring Boot fully executable jar

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            People

              Unassigned Unassigned
              mprescott Michael Prescott
              Peter Lynch Peter Lynch
              NXRM - Mad Max
              Votes:
              2 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:

                tigCommentSecurity.panel-title