Validate MIME Type of Attachments from Inbound Emails
Use a system property to validate attachments uploaded from inbound emails.
Set the glide.security.file.mime_type.validation.inbound_email system property to true to perform MIME type validation on attachments uploaded from inbound emails. Validating the MIME type of uploaded files helps to ensure that the file content matches the expected file format.
Set the system property value to true to perform MIME type validation. If the system property is not present on your instance, the fallback value is false.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.security.file.mime_type.validation.inbound_email |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | false |
| Fallback value | false |
| Category | File and resources |
| Security risk | - Severity score: 3.7 - CVSS score: Low - Security risk details: If MIME type validation does not occur, users can upload an unexpected type of file to your instance, resulting in potential vulnerabilities where the attachment is handled. |
| Dependencies and prerequisites | None |
| Functional impact | Attachments from inbound emails are not uploaded if the MIME type does not validate correctly. |
Parent Topic:File and resources