Security controls for file uploads in Ever Gauzy.
File Validationโ
File Type Restrictionsโ
Uploaded files are validated by:
- MIME type โ checked against an allowlist
- File extension โ validated against permitted extensions
- File size โ enforced maximum size limits
Allowed File Typesโ
| Category | Extensions |
|---|
| Images | .jpg, .jpeg, .png, .gif, .svg, .webp |
| Documents | .pdf, .doc, .docx, .xls, .xlsx |
| Archives | .zip |
Storage Securityโ
| Measure | Description |
|---|
| Tenant isolation | Files scoped to tenant directory |
| Unique naming | Files renamed to UUIDs |
| No execution | Upload directories have no-exec |
| Access control | Files served through API auth |
Configurationโ
| Variable | Description |
|---|
FILE_PROVIDER | Storage backend |
MAX_FILE_SIZE | Maximum upload size (bytes) |
Related Pagesโ