discord-csharp
Change MODiX/Modix.Services/Moderation/AttachmentBlacklistBehavior.cs to a Whitelist
Zero-Trust Principle -> Apply Exceptions is inherently more secure than Allow Everything -> Except
Therefore we should swap the blacklist behaviour to a whitelist behaviour.
CREDIT to : Rist for pointing it out.
The obvious next question would be... what extensions should we whitelist?
The obvious next question would be... what extensions should we whitelist?
I assume this would be a discussion better had in Discord and the output summary applied here? :)
considering this really isn't a security feature, i think a whitelist + moderators is adequate. It's mostly intended to keep the most common dangerous files from being blindly downloaded and run on accident
considering this really isn't a security feature, i think a whitelist + moderators is adequate. It's mostly intended to keep the most common dangerous files from being blindly downloaded and run on accident
Fair, feel free to close if desired.
As part of a new effort to refocus on priorities, I will close this. If you feel this is imperative to the bot, a new issue can be opened to supersede this.
