Filename validation is controlled by a Filter specified in the below mentioned file:
1. 'ESAPI.properties' and 'FileTypeSignatures.properties' files contain default property values as defined by the Service Catalog system.
The 'FileTypeSignatures.properties' file should contain list of all the file extensions that has to be blocked by Catalog system.
For example to allow .xlsx files:
1. Add ',.xlsx' to 'HttpUtilities.ApprovedUploadExtensions' within "%USM_HOME%\view \conf\ESAPI.properties"
2. Removed the following signature - 50 4B 03 04, 50 4B 05 06, 50 4B 07 08 from "%USM_HOME%\view\webapps\usm\config \FileTypeSignatures.properties"
3. Recycled Catalog service
NOTE: It's possible that the files modified in these steps could be overwritten by applying a patch or upgrading to a newer version of Service Catalog. It is recommended to make a backup of these files prior to performing any update to the application.