Deutsch
English
Español
Français
NederlandsIn order to reduce the exposure of potential vulnerabilities to the system, Mews limits the number of file types that you can upload in the system.
Mews does this to protect:
- Mews users and their data.
- The integrity of the Mews platform.
Note: Attempting to upload unsupported or potentially malicious file types results in upload failures and error messages.
In this article you can learn about:
- Accepted/ Allowlisted file types
- Unaccepted/ Blocklisted file types
- Further information regarding "application/ octet-stream" attachments
Accepted/Allowlisted File Types
You can see below the following file types per category:
Texts
| File Type | Extension |
|---|---|
| text/plain & text/plain; charset=utf-8 | .txt |
| text/csv | .csv |
Messages
| File Type | Extension |
|---|---|
| message/rfc822. | .eml |
Images
| File Type | Extension |
|---|---|
| image/bmp | .bmp |
| image/gif | .gif |
| image/jpeg | .jpeg, .jpg |
| image/png | .png |
| image/tiff | .tiff |
| image/svg+xml | .svg |
| image/webp | .webp |
Applications
| File Type | Extension |
|---|---|
| application/pdf | |
| application/vnd.openxmlformats-officedocument.spreadsheetml.sheet | .xlxs |
| application/vnd.openxmlformats-officedocument.wordprocessingml.document | .docx |
| application/zip & application/x-zip-compressed | .zip, .rar |
| application/vnd.apple.pkpass | .pkpass |
| application/pkcs7-signature | .p7b, .p7c (encrypted certificates) |
| application/x-pkcs12 | .p12, .pfx (encrypted certificates) |
| application/msword | .doc |
| application/vnd.ms-excel | .xls, .msg, .ppt |
| vnd.openxmlformats-officedocument.presentationml.presentation | .pptx |
| vnd.oasis.opendocument.text | .odt (Google Doc) |
| vnd.oasis.opendocument.spreadsheet | .ods (Google Spreadsheet) |
Unaccepted/Blocklisted File Types
Mews rejects the files that do not appear on the above allowlist. Below you can see the following examples of common blocklisted file types per category:
Texts
| File Type | Extension |
|---|---|
| text/html | .html, . xhtml |
| text/xml | .xml |
Applications
| File Type | Extension |
|---|---|
| application/x-www-form-encoded | Internet form with data |
| application/json | .json |
| application/octet-stream | .bin, .* (can be anything - see below) |
| application/xml | .xml (processed by a computer) |
| application/soap+xml | communication protocol (processed by a computer) |
Further information regarding "application/octet-stream" attachments
Files with the type "application/ octet-stream" are typically documents that you need to open in an application, such as a spreadsheet or word processor. They rely on the user to determine which application opens it and the attachment is rarely viewable in an email or web client.
Mews allows you to upload the file if it considers the content to be safe and allowlisted. If not, it disallows on account of a potential risk to the integrity of the platform.
You can learn about "application/ octet-stream" attachments here.