Key questions about this property
The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? |
This property enables or disables MIME type validation for file attachments, checking uploaded files against their configured extensions. |
| What area does it affect? |
File Upload Security |
| What does the default mean? |
The default value is "true", which means this behavior is enabled by default. |
| When should you review it? |
Review this property when configuring file upload settings or enhancing security measures. |
Out of the box property record
Raw metadata from the property record.
| Property name |
glide.security.file.mime_type.validation |
| Sys ID |
0974391e8d34021087de63ac7f1f001d |
| Type |
boolean |
| Application |
Global |
| Default value |
true |
| Description |
This property must be set to activate MIME type checking for uploads (All version Eureka and up). Enables (true) or disables (false) mime type validation for file attachments. File extensions configured via glide.attachment.extensions will be checked for MIME type during upload. |
| Updated |
2024-08-02 00:19:22 |
Sources
Official references and nearby text excerpts where this property appears.
Context preview
Snippet 1
... to explicitly allow adding attachments, then assign this role to the SOAP user. File type security You can control what file types users can attach by setting the glide.attachment.extensions and glide.security.file.mime_type.validation properties. For these properties to apply to the AttachmentCreator web service, the property glide.attachment.enforce_security_validation must be set to true. This property is true by default. Example SOAP Message The following ...
Context preview
Snippet 2
... of Finding Unique ServiceNow Product Short Description Business Impact Steps to Resolve Supporting Documentation should be validated as file inclusion and malicious file uploads, MIME type verification should be followed. glide.security.file.mime_type.validation system property to true OR insert this system property with a value of true. sn_SE10200 1 Act Unauthenticated Access to Attachments should be restricted Restriction needs to be applied for ...
Context preview
Snippet 3
... the file content", complete the steps. a. In the filter field of your instance, enter sys_properties.LIST and press Enter. b. In the Name field of the System Properties page, enter glide.security.file.mime_type.validation and press Enter. c. Select the system property glide.security.file.mime_type.validation. d. In the Value field, update the value to False. e. Right-click on the banner of the form and select Save. ...
Context preview
Snippet 4
... a. Set CPQ Integration as the current scope by using the scope selection menu icon in the Unified Navigation menu. b. In the navigation filter, enter sys_properties.list and open the glide.security.file.mime_type.validation system property. Set the Value to false, then select Submit. c. Navigate to https://<service_instance_url>/sys_certificate.do? sys_id=90b3439e2beeea1001bff246f291bf4b and do the following: ▪Attach the keystore.jks file created in Step 2d to the Certificate ...
Context preview
Snippet 5
... by URL parameters. Do not keep the system property disabled. • Type: true | false • Default value: true • Location: Add the property to the System Property [sys_properties] table. glide.security.file.mime_type.validation Enables (true) or disables (false) MIME type validation for file attachments. • Type: true | false • Default value: false • Location: System Property [sys_properties] table • Instance Security Hardening ...
Context preview
Snippet 6
... sensitive data disclosure. Restrict uploaded MIME types • Description ◦(Old <blank> ◦(New This property is used to activate MIME type checking for uploads. • Security Risk ◦(Old <blank> ◦(New If "glide.security.file.mime_type.validation" is not set to the recommended value of true, then MIME type validation for file attachments will not take place which could allow malicious file types to be uploaded. Disable ...
Context preview
Snippet 7
... the error message: File type not permitted or mime type does not match the file content, request that your administrator turn off mime type validation on attachments. The system property glide.security.file.mime_type.validation controls this setting. Enable script file synchronization for Windows enhanced security Windows Internet Explorer enhanced security blocks downloaded files that it determines are potentially dangerous. Script files synchronized with the ...
Related properties