When creating or testing a file upload functionality how do you deal with Office documents assuming that the client wants to be able to upload .doc/.docx/.xls/.xlsx?
I have found quite some reading material about the possibilities of writing your malware in Office documents in macro's and other functionalities. But I have also found that no one really has a good way to filter out all harmfull possibilities with Office documents.
Users upload these files and other users download these files and open them as they see fit (as in we have absolutely no control over the users). How do I protect the users from other users that try to upload malware?