---
sourceDocument: Brazil Build or modify applications
sourceDocumentLink: https://www.servicenow.com/docs/r/application-development

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Build or modify applications

ft:clusterId :

    - cadev

bundleId :

    - cadev

workflow :

    - Development, Data, and Analytics


---

# Considerations for file upload and download

# Considerations for file upload and download {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Lists the details of the supported file types and validation rules.

## Upload validation rules {#upload-download-ref__section_upload_validation}

The agent checks the following conditions before and after providing a file for upload.  
{#upload-download-ref__section_upload_validation__entry__3}

| Condition | Result | Error message |
|-|-|-|
| The file path is empty, missing, or not text | A human-in-the-Loop step is triggered that prompts the user to provide the required file path to unblock the process. | "File path is empty or invalid" |
| The file path contains a parent-directory reference (`..`) | Blocked | "Path traversal (..) is not allowed" |
| The file extension matches a blocked type (see the following table) | Blocked | "Blocked file type: " |
| The file does not attach after being supplied --- the path does not exist, is unreadable, or does not match the input's accepted file types | Blocked | "File was not attached. The path likely does not exist, is unreadable, or does not match the input's accepted file types." |
[Table 1. Upload validation rules]

## Blocked file types {#upload-download-ref__section_blocked_extensions}

The agent does not upload files with the following extensions, regardless of the file input's accept attribute.  
{#upload-download-ref__section_blocked_extensions__entry__2}

| Category | Blocked extensions |
|-|-|
| Executables | `.exe`, `.msi`, `.dll`, `.com`, `.scr`, `.pif` |
| Windows scripts | `.bat`, `.cmd`, `.ps1`, `.vbs`, `.vbe`, `.wsf`, `.wsh` |
| Unix scripts | `.sh`, `.csh`, `.ksh`, `.bash` |
| Other script or code files | `.js`, `.jsx`, `.ts`, `.tsx`, `.py`, `.pyc`, `.pyo`, `.rb`, `.pl`, `.php`, `.jar`, `.class` |
| Shortcut and link files | `.lnk`, `.url`, `.desktop` |
| Macro-enabled Office files | `.docm`, `.xlsm`, `.pptm` |
[Table 2. Blocked file extensions]

## Download status values {#upload-download-ref__section_download_statuses}

The agent reports every tracked download using one of the following statuses.  
{#upload-download-ref__section_download_statuses__entry__2}

| Status | Meaning |
|-|-|
| `pending` | The download has started but has not yet finished. |
| `completed` | The download finished, and the browser reported a final saved-file path. |
| `interrupted` | The download stopped before finishing. The agent does not retry it automatically. |
[Table 3. Download status values]