Configure File Upload Restrictions in Hue

Allows administrators to control which file types users can upload through the File Browser.

About this task

Starting with the DEP 10.1.0 release, Hue 4.11.0 allows administrators to control which file types users can upload through the File Browser.

Filtering is based strictly on the file name extension, not file content. The check uses the last suffix after the final dot (.) and is case-insensitive.

If both allow and restrict lists are defined, restrict takes precedence.

Default Behavior (No Restrictions Configured)

By default, both parameters in hue.ini are commented out:
[filebrowser]
## restrict_file_extensions=.exe, .zip, .rar, .tar, .gz
## allow_file_extensions=.tsv, .csv, .xlsx

Behavior in Default State

When both settings remain commented:
  • All file extensions are allowed.
  • No filtering is applied during upload.
  • Files with any extension (including .exe, .zip, etc.) can be uploaded.
  • Files without extensions are also allowed.

In this state, Hue performs no extension-based validation. This is the out-of-the-box behavior after installation unless explicitly configured otherwise.

Configuration Location

Edit:
/opt/mapr/hue/hue-4.11.0/desktop/conf/hue.ini
Under:
[filebrowser]

Configuration Options

Restrict Extensions

Blocks specific file types:
[filebrowser]
restrict_file_extensions=.exe, .zip, .rar, .tar, .gz

Allow Extensions

Permits only specified types:
[filebrowser]
allow_file_extensions=.csv, .tsv, .xlsx
Combined Example
[filebrowser]
restrict_file_extensions=.exe, .zip, .rar, .tar, .gz
allow_file_extensions=.csv, .tsv, .xlsx
Behavior:

  • .exe, .zip, .rar, .tar, .gz - Blocked

  • .csv, .tsv, .xlsx - Allowed
  • Any other extension - Blocked
  • Files without extension - Blocked

Restart Requirement

After updating hue.ini, restart Hue:
maprcli node services -name hue -action restart -nodes <node>
Changes take effect only after a restart.
NOTE

  • Validation is extension-based only (no MIME/content inspection).

  • The final extension determines behavior (archive.tar.gz → .gz).
  • Recommended for production: combine both restrict and allow lists for stricter control.