Improved Upload Validation for Maximum Content Security

To enhance platform security, EPC now verifies all uploaded files to ensure they are safe and match their declared file type. This applies to all uploaded content, including documents and attachments.

What’s New

File Type Validation

EPC now checks that uploaded files match their file extensions.

• For example, a file named document.pdf must actually be a PDF and not a file of another type disguised with a .pdf extension.
  

New Advanced System Settings

• UPLOAD_VALIDATE_MEDIA_TYPES (enabled by default)
  • When enabled, EPC validates that the file’s content type matches its filename extension.

• UPLOAD_ALLOWED_MEDIA_TYPES (optional setting)
  • Allows organizations to define which file types are permitted for upload.
    • For example, to only allow PDFs, plain text, or Word files, use:
      application/pdf, text/plain, application/vnd.openxmlformats-officedocument.wordprocessingml.document

Files that do not meet the requirements will be rejected.

For more information on these advanced settings, click here.

*Note: UPLOAD_ALLOWED_MEDIA_TYPES is only enforced when UPLOAD_VALIDATE_MEDIA_TYPES is enabled.