Fixed three vulnerabilities identified by the Santander Portugal Cybersecurity Team:

1. The Allowed File Extensions are now validated both on client-side and server-side, being stored on a Session Variable instead of a input parameter to the File Process URL;
2. The Upload File Size Limit is now validated both on client-side and server-side, being stored on a Session Variable;
3. The built-in File Process URL can now be secured to be accessed only by Registered Users, by setting the AllowAnonymousUpload Site Property to False.

Fixed two issues in the component:

1. Added a ComitTransaction to the integrated File Process Url (Upload.aspx) to mitigate possible Race Conditions between saving the files to the database and the Consumer reading them;
2. Changed to only return a COMPLETE Notification Message to Consumer when received a Success message from the File Process URL

• Included J2EE stack compatibility

• Fixed an issue with multiple periods in the filename (thanks to Keith Matthews).
• Updated all missing descriptions to comply with the OutSystems best practices.

• Included J2EE stack compatibility
• Pushed latest changes from version 2.0.0

Added Features

Filter for supported extensions.