Validate MIME Type of Attachments from Inbound Emails

Use a system property to validate attachments uploaded from inbound emails.

Set the glide.security.file.mime_type.validation.inbound_email system property to true to perform MIME type validation on attachments uploaded from inbound emails. Validating the MIME type of uploaded files helps to ensure that the file content matches the expected file format.

Set the system property value to true to perform MIME type validation. If the system property is not present on your instance, the fallback value is false.

More information

Attribute	Description
Configuration name	glide.security.file.mime_type.validation.inbound_email
Configuration type	System Properties (/sys_properties_list.do)
Data type	Boolean
Recommended value	true
Default value	false
Fallback value	false
Category	File and resources
Security risk	Severity score: 3.7 CVSS score: Low Security risk details: If MIME type validation does not occur, users can upload an unexpected type of file to your instance, resulting in potential vulnerabilities where the attachment is handled.
Dependencies and prerequisites	None
Functional impact	Attachments from inbound emails are not uploaded if the MIME type does not validate correctly.