---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict uploaded MIME types

# Restrict uploaded MIME types {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.security.file.mime_type.validation property to
activate MIME type checking for uploads. You can enable (set the property to
true) or disable (set it to false) MIME type
validation for file attachments.
The glide.security.file.mime_type.validation system property is used to activate MIME type checking for uploads.

Ensure that the property glide.security.file.mime_type.validation exists in the System Properties \[sys_properties\] and is set to true. If the property does not appear in the System
Properties \[sys_properties\] table, add a new record.

## More information {#sc-upload-mime-type-restriction__section_wc1_cqn_phc}

{#sc-upload-mime-type-restriction__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.security.file.mime_type.validation |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | \<none\> |
| Fallback value | false |
| Category | [Validation, sanitization, and encoding](https://www.servicenow.com/docs/qvFon3mPY~i4OtLtQVS_QQ "Validation, sanitization, and encoding addresses input validation to prevent against vulnerabilities like Cross-Site Scripting (XSS), SQL injection and other attacks.") |
| Security risk | * Severity score: 5.4 * CVSS rating: Medium * Security risk details: MIME type validation for file attachments will not take place which could allow malicious file types to be uploaded. {#sc-upload-mime-type-restriction__ul_g1g_3sf_xwb} |
| Functional impact | This remediation enables MIME type verification on the attachments to the application. No functionality impact, unless there is a malicious intent in uploading the files as this validation is merely checking for mis-sync between the MIME type and the data. |
| Dependencies and prerequisites | None |
[ ]

{#sc-upload-mime-type-restriction__table_ajc_b43_3kb}