---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict uploaded MIME types \[Updated in Security Center 1.3 and 2.0\]

# Restrict uploaded MIME types \[Updated in Security Center 1.3 and 2.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use the glide.security.file.mime_type.validation property to
activate MIME type checking for uploads. You can enable (set the property to
true) or disable (set it to false) MIME type
validation for file attachments.

## Prerequisites {#sc-upload-mime-type-restriction__section_gp3_dnk_llb}

Before setting this property, set the glide.attachment.extensions property. Only those extensions specified in glide.attachment.extensions are checked for MIME type during upload. To learn
more, see [Restrict file extensions](https://www.servicenow.com/docs/access?context=restrict-file-extensions&version=australia&pubname=australia-platform-user-interface&ft:locale=en-US).

Ensure the Glide Property
glide.ui.jelly.js_interpolation.protect_nested_expressions exists and
is set to the value true. If the property does not appear in the sys_properties table, add a
new record.

## More information {#sc-upload-mime-type-restriction__section_more_information}

{#sc-upload-mime-type-restriction__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Property name | glide.security.file.mime_type.validation |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | [Validation, sanitization, and encoding](https://servicenow-prod.fluidtopics.net/F1nREUr0FIKK6cga6jbKwg "Validation, sanitization, and encoding addresses input validation to prevent against vulnerabilities like Cross-Site Scripting (XSS), SQL injection and other attacks.") |
| Purpose | To enforce checking of MIME type / magic bytes during file uploads. |
| Recommended value | true |
| Default value | true |
| Security risk rating | 5.4 |
| Functional impact | This remediation enables MIME type verification on the attachments to the application. No functionality impact, unless there is a malicious intent in uploading the files as this validation is merely checking for mis-sync between the MIME type and the data. |
| Security risk | (Medium) To reduce vulnerabilities such as file inclusion and malicious file uploads, MIME type verification should be enabled. |
| References | [Administering attachments](https://www.servicenow.com/docs/access?context=r_AdministeringAttachments&version=australia&pubname=australia-platform-administration&ft:locale=en-US) |
[ ]

{#sc-upload-mime-type-restriction__table_ajc_b43_3kb}

See [Hardening settings](https://servicenow-prod.fluidtopics.net/RXuZVYITUAWpGv29FS1iKg "The ServiceNow Security Center (SSC) hardening settings content contains detailed descriptions and compliance values for the security-related system properties and plugins in the ServiceNow AI Platform. You can set these properties using the hardening settings app in the Security Center.") for details on configuring properties for hardening.

To learn more about adding or creating a system property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).