Module Description
* This module performs a server-side validation for the extension.
* It works on the upload type file field used in any entity.
* It can perform a more secure and reliable check on the file's mime type and compare that to the allowed file extensions.
* It helps in site making malicious type uploads free for security purposes.
* Logs the upload if found malicious i.e if not of the type of extension which is being requested.
Installation composer require 'drupal/file_mime_validator' drush en file_mime_validator Configuration
* Navigate to Admin->Config->System->File Mime Validator
* Configure file mime types by adding to default ones.
Module Link
Project Usage
189
Security Covered
Covered By Security Advisory
Version Available
Production
Module Summary
This module aims to solve server-side validation for file uploads by checking the file's mime type against allowed file extensions to prevent malicious uploads.
Data Name
file_mime_validator