Thread

Hello,

We are using the Forum module and with attachments enabled. For some PDFs we get the following error:
Error Message:  The file you are attempting to upload has invalid content for its MIME type.

It works well for others. Has anyone encountered this issue before?

Thanks in advance for your help.
Mario

How do these PDFs differ? Do they have, perhaps, some Jabvascript or other “active” content embedded? The only short term solution I see is probably to disable XSS filtering.

Dear Ingmar,

Thank you for your reply.
You are right. I think the PDF in question has some “active” content. Disabling XSS filtering fixed the issue.

Will this pose a major security risk?

Thanks again for your help,
Mario

Hi Mario,

It is a trade-off but customers do routinely disable the XSS feature without issue. It depends on how much you trust the people posting the attachments, and how often it’s an issue. Ideally, the PDFs would be created without such content so that XSS filtering can remain on.