Changed the Session Variables to a Temporary Database Cache in order to support more than one Block per page:

1. The Allowed File Extensions are now validated both on client-side and server-side, being stored on a Temporary Database Cache instead of a input parameter to the File Process URL;
2. The Upload File Size Limit is now validated both on client-side and server-side, being stored on a Temporary Database Cache.

Fixed three vulnerabilities identified by the Santander Portugal Cybersecurity Team:

1. The Allowed File Extensions are now validated both on client-side and server-side, being stored on a Session Variable instead of a input parameter to the File Process URL;
2. The Upload File Size Limit is now validated both on client-side and server-side, being stored on a Session Variable;
3. The built-in File Process URL can now be secured to be accessed only by Registered Users, by setting the AllowAnonymousUpload Site Property to False.

• Included J2EE stack compatibility

• Fixed an issue with multiple periods in the filename (thanks to Keith Matthews).
• Updated all missing descriptions to comply with the OutSystems best practices.

• Included J2EE stack compatibility
• Pushed latest changes from version 2.0.0

Added Features

Filter for supported extensions.