File Upload Security
Matrix42 Professional applies several validation checks when files are uploaded to the platform in order to reduce the risk of harmful or unsupported files being stored in the system.
During upload, the platform verifies the file type, confirms the MIME type, and validates the internal structure of the file to ensure that the file content matches the declared format. These checks help prevent files from disguising their actual type or containing malformed structures.
Archive files (such as compressed files) are validated as containers, but their internal contents are not inspected during upload.
Depending on system configuration and security policies, certain file types may be restricted from being uploaded. For example, executable or script-based file formats may be blocked to reduce security risks.
These validation mechanisms support modern application security practices and align with industry guidelines such as the OWASP Application Security Verification Standard (ASVS).
If a file does not pass the validation checks, the upload is rejected.