Types of files that cannot be added to a list or library
Allow or prevent custom script
No restrictions to types of files added to SharePoint
Recent improvements in SharePoint in Microsoft 365 and SharePoint Server 2019 have removed the limitations on types of files that can be added. There are currently no known types of files that cannot be added.
The following types of files can be uploaded to SharePoint in a web browser or using the sync app, but they won't work unless the site allows you to run custom script. By default, custom script is blocked on user-created sites that have Microsoft 365 groups. If you're a global admin or SharePoint admin in your organization, see Allow or prevent custom script to learn how to change the custom script settings.
File extension |
File type |
---|---|
.aspx |
ASP.NET Active server page |
.asmx |
ASP.NET web services source file |
.ascx |
ASP.NET wep user control file |
.master |
ASP.NET master web page |
.xap |
Windows phone installation |
.swf |
ShockWave Flash |
.jar |
Java archive |
.xsf |
Office InfoPath form definition file |
.htc |
HTML Component file |
If your admin allows custom script on a site, you need "Add and Customize Pages" permission (part of the Design and Full Control permission levels) to run the script in the file types listed above.
For the list of file names restricted by the sync app, see Invalid file names and file types in OneDrive and SharePoint.)
Blocked file types for SharePoint Server 2016
There are certain types of files that you can't upload to a list or a library on SharePoint Server 2016. By default, SharePoint blocks these file types. For example, if .asp is on the list of blocked file extensions, a file called "newpage.asp" is blocked.
Variations of a file extension are also blocked. The following list shows different ways of representing the same file, all of which are blocked if the .hta extension is on the list of blocked file extensions.
-
filename.hta
-
filename.hta.
-
filename.hta.{3050F4D8-98B5-11CF-BB82-00AA00BDCE0B}
-
filename.hta::$DATA
Note: These lists are the standard files that SharePoint blocks. Administrators can add more types of files to block. If you find file types that aren't listed here, but are blocked, speak to your SharePoint admin or manager.
These are the default blocked file types for new SharePoint Server 2016 deployments.
To learn how to change or add file see Add or remove file types.
File extension |
File type |
---|---|
.ashx |
ASP.NET Web handler file. Web handlers are software modules that handle raw HTTP requests received by ASP.NET. |
.asmx |
ASP.NET Web Services source file |
.json |
JavaScript Object Notation file |
.soap |
Simple Object Access Protocol file |
.svc |
Windows Communication Foundation (WCF) service file |
.xamlx |
Visual Studio Workflow service file |
Filenames that include braces (for example, filename.{doc}) are blocked automatically.
Add or remove blocked files to SharePoint Server 2016
If you have farm administrator permissions, you can add or remove blocked file types.
-
Open SharePoint Central Administration.
-
Click Security, and then click Define blocked file types.
-
To change the web application, click the link next to Web Application: and then click Change Web Application.
In the Select Web Application dialog, click an app.
-
On the Blocked File Types page, do one of the following:
To add a file to block, type a file extension (with the period), one per line.
To stop blocking a file, select the file extension and press the Del key.
If you delete the wrong file by accident, press CTRL + Z to undo.
Note: You do not have to type a file name extension in the list in alphabetical order. The next time that you open the list, the file name extension you added will be correctly sorted in alphabetical order.
-
Click OK.
There are certain types of files that you can't upload to a list or a library on SharePoint Server 2013 and SharePoint Server 2010. By default, SharePoint blocks these file types. For example, if .asp is on the list of blocked file extensions, a file called "newpage.asp" is blocked.
Variations of a file extension are also blocked. The following list shows different ways of representing the same file, all of which are blocked if the .hta extension is on the list of blocked file extensions.
-
filename.hta
-
filename.hta.
-
filename.hta.{3050F4D8-98B5-11CF-BB82-00AA00BDCE0B}
-
filename.hta::$DATA
Note: These lists are the standard files that SharePoint blocks. Administrators can add more types of files to block. If you find file types that aren't listed here, but are blocked, speak to your SharePoint admin or manager.
Blocked file types for SharePoint Foundation and SharePoint Server 2013 and SharePoint Server 2010
For on-premises deployments of SharePoint Foundation or SharePoint Server 2013 and SharePoint Server 2010, a server administrator can add or remove file types from the list of blocked file types. For more information about how to work with blocked file types for SharePoint Server sites, see one of the following articles, depending on the version of SharePoint you have:
The following file types are blocked by default in on-premises deployments of SharePoint.
File extension |
File type |
---|---|
.ade |
Microsoft Access project extension |
.adp |
Microsoft Access project |
.asa |
ASP declarations file |
.ashx |
ASP.NET Web handler file. Web handlers are software modules that handle raw HTTP requests received by ASP.NET. |
.asmx |
ASP.NET Web Services source file |
.asp |
Active Server Pages |
.bas |
Microsoft Visual Basic class module |
.bat |
Batch file |
.cdx |
Compound index |
.cer |
Certificate file |
.chm |
Compiled HTML Help file |
.class |
Java class file |
.cmd |
Microsoft Windows NT command script |
.com |
Microsoft MS-DOS program |
.config |
Configuration file |
.cnt |
Help Contents file |
.cpl |
Control Panel extension |
.crt |
Security certificate |
.csh |
Script file |
.der |
DER Certificate file |
.dll |
Windows dynamic-link library |
.exe |
Executable file |
.fxp |
Microsoft Visual FoxPro compiled program |
.gadget |
Windows Gadget |
.grp |
SmarterMail group file |
.hlp |
Help file |
.hpj |
Hemera Photo Objects Image File |
.hta |
HTML program |
.htr |
Script file |
.htw |
HTML document |
.ida |
Internet Information Services file |
.idc |
Internet database connector file |
.idq |
Internet data query file |
.ins |
Internet Naming Service |
.isp |
Internet Communication settings |
.its |
Internet Document Set file |
.jse |
JScript Encoded script file |
.json |
JavaScript Object Notation file |
.ksh |
Korn Shell script file |
.lnk |
Shortcut |
.mad |
Shortcut |
.maf |
Shortcut |
.mag |
Shortcut |
.mam |
Shortcut |
.maq |
Shortcut |
.mar |
Shortcut |
.mas |
Microsoft Access stored procedure |
.mat |
Shortcut |
.mau |
Shortcut |
.mav |
Shortcut |
.maw |
Shortcut |
.mcf |
Multimedia Container Format |
.mda |
Microsoft Access add-in program |
.mdb |
Microsoft Access program |
.mde |
Microsoft Access MDE database |
.mdt |
Microsoft Access data file |
.mdw |
Microsoft Access workgroup |
.mdz |
Microsoft Access wizard program |
.ms-one-stub |
Microsoft OneNote stub |
.msc |
Microsoft Common Console document |
.msh |
Microsoft Agent script helper |
.msh1 |
Microsoft Agent script helper |
.msh1xml |
Microsoft Agent script helper |
.msh2 |
Microsoft Agent script helper |
.msh2xml |
Microsoft Agent script helper |
.mshxml |
Microsoft Agent script helper |
.msi |
Microsoft Windows Installer package |
.msp |
Windows Installer update package file |
.mst |
Visual Test source files |
.ops |
Microsoft Office profile settings file |
.pcd |
Photo CD image or Microsoft Visual Test compiled script |
.pif |
Shortcut to MS-DOS program |
.pl |
Perl script |
.prf |
System file |
.prg |
Program source file |
.printer |
Printer file |
.ps1 |
Windows PowerShell Cmdlet file |
.ps1xml |
Windows PowerShell Display configuration file |
.ps2 |
Windows PowerShell Cmdlet file |
.ps2xml |
Windows PowerShell Display configuration file |
.psc1 |
Windows PowerShell Console file |
.psc2 |
Windows PowerShell Console file |
.pst |
Microsoft Outlook personal folder file |
.reg |
Registration entries |
.rem |
ACT! database maintenance file |
.scf |
Windows Explorer command file |
.scr |
Screen saver |
.sct |
Script file |
.shb |
Windows shortcut |
.shs |
Shell Scrap object |
.shtm |
HTML file that contains server-side directives |
.shtml |
HTML file that contains server-side directives |
.soap |
Simple Object Access Protocol file |
.stm |
HTML file that contains server-side directives |
.svc |
Windows Communication Foundation (WCF) service file |
.url |
Uniform Resource Locator (Internet shortcut) |
.vb |
Microsoft Visual Basic Scripting Edition (VBScript) file |
.vbe |
VBScript Encoded Script file |
.vbs |
VBScript file |
.vsix |
Visual Studio Extension |
.ws |
Windows Script file |
.wsc |
Windows Script Component |
.wsf |
Windows Script file |
.wsh |
Windows Script Host settings file |
.xamlx |
Visual Studio Workflow service file |
Filenames that include braces (for example, filename.{doc}) are blocked automatically.
Add or remove blocked files to SharePoint Server 2013 and SharePoint Server 2010
If you have farm administrator permissions, you can add or remove blocked file types.
-
Open SharePoint Central Administration.
-
Click Security, and then click Define blocked file types.
-
To change the web application, click the link next to Web Application: and then click Change Web Application.
In the Select Web Application dialog, click an app.
-
On the Blocked File Types page do one of the following:
To add a file to block, type a file extension (with the period), one per line.
To stop blocking a file, select the file extension and press the Del key.
If you delete the wrong file by accident, press CTRL + Z to undo.
Note: You do not have to type a file name extension in the list in alphabetical order. The next time that you open the list, the file name extension you added will be correctly sorted in alphabetical order.
-
Click OK.