---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Validate MIME Type of Attachments from Inbound Emails

# Validate MIME Type of Attachments from Inbound Emails {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use a system property to validate attachments uploaded from inbound emails.
Set the glide.security.file.mime_type.validation.inbound_email system property to true to perform MIME type validation on attachments uploaded from inbound emails. Validating the MIME
type of uploaded files helps to ensure that the file content matches the expected file format.

Set the system property value to true to perform MIME type validation. If the system property is not present on your instance, the fallback value is false.

## More information {#sc-validate-mime-type-of-attachments-from-inbound-emails__section_qhx_1b1_xwb}

{#sc-validate-mime-type-of-attachments-from-inbound-emails__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.security.file.mime_type.validation.inbound_email |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | false |
| Fallback value | false |
| Category | [File and resources](https://www.servicenow.com/docs/gPqIZ7MebVKuvgsuXkW1Pw "The file and resources category ensures applications handle untrusted file data securely and store untrusted data from untrusted sources with limited permissions in an appropriate location.") |
| Security risk | * Severity score: 3.7 * CVSS score: Low * Security risk details: If MIME type validation does not occur, users can upload an unexpected type of file to your instance, resulting in potential vulnerabilities where the attachment is handled. {#sc-validate-mime-type-of-attachments-from-inbound-emails__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| Functional impact | Attachments from inbound emails are not uploaded if the MIME type does not validate correctly. |
[ ]

{#sc-validate-mime-type-of-attachments-from-inbound-emails__table_ajc_b43_3kb}