Support forums - Re: Does AJAX Uploader validate against MIME types , or does it ONLY look at file extensions?

Re: Does AJAX Uploader validate against MIME types , or does it ONLY look at file extensions?

Reply Quote

Hi,

The MIME type is sent from client side. that is not safe.

For example , the Request.Files[x].ContentType is not safe , the Microsoft comment is

///Gets the MIME type of a file sent by a client

We do not provide MIME type because we don't want developers depend on it and make security issues.

And uploader do not provide API to check the file data to determine the MIME too.

If you want to limit it , you need check the content by your self.

Regards,
Terry.