Afternoon.
With the new availability of A039 (upload file) and it’s scanning capabilities - Are there any pre-defined files that eRS team may have that will trigger a THREATS_FOUND or VALIDATION_FAILED response, when we try associate the uploads via A012 (maintain letter)
I only ask, because instead of dipping a spoon into the cesspool of the internet to try find purposefully “troublesome” files and send them when testing, I am hoping the ERS team has configured a few test or sample safe files that will trigger the above responses?
We are due for witness testing this specific functionality in a few weeks, so hoping the witness test team may have example payloads / files perhaps?
Edited: I assume validation failed is likely filetypes that are not on the accepted list. If that is so, then that negates the need for example VALIDATION_FAILED file.
Thanks.
Hi,
You can use an EICAR test file to trigger malware detection https://www.eicar.org/
VALIDATION_FAILED – You can place an attachment into this state by using one of the failure cases below:
1. Content type of the file is not supported. 2. Content type of the file does not correlate with the file extension 3. File provided is too large and is not supported by e-RS
Thanks,
Lucy
Hi Lucy.
The EICAR file works perfectly, thank you for that. The steps to get a VALIDATION_FAILED is still tripping me up (and the witness test folks wanted us to prove we handle it).
Using your three ways to get a VALIDATION_FAILED response; we:
a) upload a a PDF file some_pdf_file.bob (with a .bob file extension) and get a 406 response from the API (REC_NOT_ACCEPTABLE - which is fine, but that prevents us linking it to an referral to get the VALIDATION_FAILED response from A012).
b) uploaded a PDF file (renamed to .png) - and ERS API accepted it, and returned it as AVAILBLE - so it didn’t perform an inspection to ensure the file contents matches the file type. See screenshot attached.
c) Trying a 200 meg valid PDF file, (way above the 100 meg limit) - we get a 422 response from the A039 call with the reason “File size must be between 1 and 104857600 bytes”
I am a bit stymied in how to get an invalid file into the ERS system, in order to try link it to a referral and get the VALIDATION_FAILED status.
Mismatched filename vs contents:
File too large response from A039 (before we even get to the PUT command)
