File Upload Security
This is a technical preview feature
The feature currently checks files uploaded via the UI, but not other files in the system. The feature needs to be enabled via a hidden platform setting, file.upload.type.validation.enabled, set to true. The setting is set to false by default.
Matrix42 Professional applies several validation checks when files are uploaded to the platform in order to reduce the risk of harmful or unsupported files being stored in the system.
During upload, the platform verifies the file type, confirms the MIME type, and validates the file's internal structure to ensure the file content matches the declared format. These checks help prevent files from disguising their actual type or containing malformed structures.
Archive files (such as compressed files) are validated as containers, but their internal contents are not inspected during upload.
Depending on system configuration and security policies, certain file types may be restricted from being uploaded. For example, executable or script-based file formats may be blocked to reduce security risks.
These validation mechanisms support modern application security practices and align with industry guidelines such as the OWASP Application Security Verification Standard (ASVS).
If a file fails validation checks, the upload is rejected.
Table of Contents