File Mime Validator
291 sites
Security covered
This module enhances file uploads by performing a secure, server-side check of the file's MIME type against its extension. It helps prevent malicious uploads by ensuring file types match their declared extensions, and logs any discrepancies.
- This module performs a server-side validation for the extension.
- It works on the upload type file field used in any entity.
- It can perform a more secure and reliable check on the file's mime type and compare that to the allowed file extensions.
- It helps in site making malicious type uploads free for security purposes.
- Logs the upload if found malicious i.e if not of the type of extension which is being requested.
- Provides extension configurable, so that it won't get outdated.
Installation
composer require 'drupal/file_mime_validator'
drush en file_mime_validator
Configuration
- Navigate to Admin->Config->System->File Mime Validator
- Configure file mime types by adding to default ones.