Whitelisting Files in JSM

[Dean Burston]

Hi all,

This is my first post so please be kind :)

We are looking at going live with JSM in Q1 2025 and I have a question about whitelisting file types on issues.  It appears that we are presently unfiltered and anything is allowed, I tested this by created an exe file and JSM allowed this.  Naturally, file types like exe can be very harmful as can contain malware with relative ease, therefore a whitelist should be positioned to protect our business against unwanted file types.

How does JSM handle this today please, from what I have read this is not in place today, surely it is, can anyone please support me on how this is handled?

Thanks,

Dean

[Jovin · Accepted solution]

Hey @Dean Burston 

There's no way to specify what file types are acceptable on upload, however, once an issue is created an automation rule can match the file names (and types) using regex and delete anything that matches.

See screenshot below:

[Dean Burston]

Hi @Jovin 

Thanks for the note here, though I am surprised that a simple whitelist option doesn't exist in a product like Jira JSM, this seems fairly foundational to file controls.

Is there any manner of understanding if this is planned against a future roadmap, or if there is a method whereby this can be requested to be included?

Many other products offer this as standard so it would be good to have this created into the core product, even if the process was a simple text editor for allowed file types.

Thanks for responding.

Dean

[Jovin]

Hey @Dean Burston 

In terms of roadmap, you can take a look at the below resources:

• Roadmap: https://www.atlassian.com/roadmap/cloud 

I found this suggestion (and voted for it!) for the file type whitelisting: https://jira.atlassian.com/browse/JRACLOUD-61024 

I suggest you vote for it too, hopefully one day it gets picked up!

[Dean Burston]

Hi again @Jovin 

Thanks so much for the details again, as mentioned in the original post I am still a little Jira green :)

I have voted for my own item, hopefully others will chime in too and the post will get some traction.

Happy Christmas and all the best.

Kind regards

Dean Burston | Support Operations Manager | Arcwide UK Support Team

T: 44 (0)207 3373220 | M: 07825 987709 | e: dean.burston@arcwide.com

[Laurie Sciutti]

Hey @Dean Burston ~ looks like the https://jira.atlassian.com/browse/JRACLOUD-61024 issue @Jovin posted includes an actual workaround to achieve this using a Jira automation rule.  Scroll through the Description of the issue and you can see the steps to create this rule.  HTH