File extensions and WebDav usage

mossywall

Hi there,

Q1
I just have a question about the security and safety of Zotero. I am doing a risk assessment of Zotero V6 for my organization and I found out that I can upload files that has extensions like .ps1 or .exe to a group library of Zotero and Zotero will accept that with no problem. My question: is it safe for Zotero to accept such files? Also, is there a way to prevent Zotero from allowing files with specific extensions to be uploaded to a library?

Q2
I just want to confirm that there is no way that a group of people can work on the same library using WebDav as mentioned in the documents.

Thank you.

adamsmith

1. Zotero stores zipped versions of files online. They can't execute on the server -- there's no risk for Zotero itself. You can obviously use Zotero file storage to disseminate malicious files (just like you can use Dropbox, github, or email for that) to other people in your group. There's no setting to exclude certain file types, no.
2. Correct, no WebDAV for groups.