[Mimedefang] Block .js extension was Fwd: G Suite Update Alerts

[Kevin A. McGrail]

OK, so I seem to post only about extensions lately... Gmail is going to
block .js which mirrors in the wild attempts in zip files as well that
we have seen VERY minorly in recent days.

Gmail will block .js file attachments starting February 13, 2017
<http://gsuiteupdates.googleblog.com/2017/01/gmail-will-restrict-js-file-attachments.html>


Posted: 25 Jan 2017 01:30 PM PST

Gmail currently restricts certain file attachments (e.g. .exe, .msc, and
.bat) for security reasons, and starting on *February 13, 2017*, we will
not allow .js file attachments as well. Similar to other restricted file
attachments
<https://support.google.com/mail/answer/6590#messageswattachments>, you
will not be able to attach a .js file and an in-product warning will
appear, explaining the reason why.

If you still need to send .js files for legitimate reasons, you can use
Google Drive <http://drive.google.com/>, Google Cloud Storage
<https://cloud.google.com/storage/>, or other storage solutions to share
or send your files.

Regards,
KAM
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list ***@lists.roaringpenguin.com
http://lists.roaringpenguin.com/

[Dianne Skoll]

On Thu, 26 Jan 2017 08:10:13 -0500

Post by Kevin A. McGrail
OK, so I seem to post only about extensions lately... Gmail is going
to block .js which mirrors in the wild attempts in zip files as well
that we have seen VERY minorly in recent days.

Huh. We take a more nuanced approach. We block .js files directly attached
to an email message. For looking inside zips, we block .js files UNLESS
there's also at least one .html, .htm or .css file also found in the zip.

A blanket block of .js would really annoy web developers who seem to mail
around zip files of projects (yeah, yeah, this "git" nonsense will never
catch on...)

Regards,

Dianne.
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list ***@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mim

[w***@e1b.org]

Post by Dianne Skoll
A blanket block of .js would really annoy web developers who seem to mail
around zip files of projects (yeah, yeah, this "git" nonsense will never
catch on...)

Git outta here!! (Sorry, couldn't resist!)

Even Google recommends using a file sharing site, pushing their own
obviously.


Confidentiality Notice:
This electronic message and any attachments may contain confidential or
privileged information, and is intended only for the individual or entity
identified above as the addressee. If you are not the addressee (or the
employee or agent responsible to deliver it to the addressee), or if this
message has been addressed to you in error, you are hereby notified that
you may not copy, forward, disclose or use any part of this message or any
attachments. Please notify the sender immediately by return e-mail or
telephone and delete this message from your system.

_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list ***@lists.roaringpenguin.com
http://lists.roaringpenguin.co

[Kevin A. McGrail]

Post by Dianne Skoll
On Thu, 26 Jan 2017 08:10:13 -0500

Post by Kevin A. McGrail
OK, so I seem to post only about extensions lately... Gmail is going
to block .js which mirrors in the wild attempts in zip files as well
that we have seen VERY minorly in recent days.

Huh. We take a more nuanced approach. We block .js files directly attached
to an email message. For looking inside zips, we block .js files UNLESS
there's also at least one .html, .htm or .css file also found in the zip.
A blanket block of .js would really annoy web developers who seem to mail
around zip files of projects (yeah, yeah, this "git" nonsense will never
catch on...)

Nice nuanced approach. We haven't had too many complaints and have
blocked js/jse with quarantine for eons including inside zip files
recursively. RCS like git is really the correct answer...

Regards,
KAM
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list ***@lists.roaringpenguin.com
http://lists.roaringpenguin