File Mime Validator
278 sites
Security covered
Drupal 10–11
This module enhances file uploads by performing a secure, server-side check of the file's MIME type against its extension. It helps prevent malicious uploads by ensuring file types match their declared extensions, and logs any discrepancies.
- This module performs a server-side validation for the extension.
- It works on the upload type file field used in any entity.
- It can perform a more secure and reliable check on the file's mime type and compare that to the allowed file extensions.
- It helps in site making malicious type uploads free for security purposes.
- Logs the upload if found malicious i.e if not of the type of extension which is being requested.
- Provides extension configurable, so that it won't get outdated.
Installation
composer require 'drupal/file_mime_validator'
drush en file_mime_validator
Configuration
- Navigate to Admin->Config->System->File Mime Validator
- Configure file mime types by adding to default ones.
Depends on
Dependencies of the latest stable release
No dependencies recorded for this project.
Required by
Tracked projects that depend on this one
No tracked projects depend on this one yet.