---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Validate file MIME type in AttachmentCreator web service

# Validate file MIME type in AttachmentCreator web service {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The glide.attachment.enforce_security_validation property
determines whether Multipurpose internet Mail Extensions (MIME) files undergo
validation.
Ensure that MIME-types are validated for attachments to prevent dangerous files from being uploaded on your instance using wrong file extensions.

Set the glide.attachment.enforce_security_validation system property to true. When set to true, files are uploaded with the correct file type extension.

## More information {#sc-validate-file-mime-type-in-attachmentcreator__section_qhx_1b1_xwb}

{#sc-validate-file-mime-type-in-attachmentcreator__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.attachment.enforce_security_validation |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | true |
| Category | [File and resources](https://www.servicenow.com/docs/E1vObReCaeSjc8uLdHisig "The file and resources category ensures applications handle untrusted file data securely and store untrusted data from untrusted sources with limited permissions in an appropriate location.") |
| Security risk | * Severity score: 6.7 * CVSS score: Medium * Security risk details: If the property is set to false, there's no validation for MIME files during uploads. This could enable malicious files to be disguised by changing their file extension. {#sc-validate-file-mime-type-in-attachmentcreator__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| References | <https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types/Common_types> |
| Functional impact | Set this hardening setting to true to run mime-type and file extension validations on uploaded file attachments. No validations are run if this property is set to false. This property is set to true by default. |
[ ]

{#sc-validate-file-mime-type-in-attachmentcreator__table_ajc_b43_3kb}