Security controls for file uploads in Ever Gauzy.
File Validationβ
File Type Restrictionsβ
Uploaded files are validated by:
- MIME type β checked against an allowlist
- File extension β validated against permitted extensions
- File size β enforced maximum size limits
Allowed File Typesβ
| Category | Extensions |
|---|
| Images | .jpg, .jpeg, .png, .gif, .svg, .webp |
| Documents | .pdf, .doc, .docx, .xls, .xlsx |
| Archives | .zip |
Storage Securityβ
| Measure | Description |
|---|
| Tenant isolation | Files scoped to tenant directory |
| Unique naming | Files renamed to UUIDs |
| No execution | Upload directories have no-exec |
| Access control | Files served through API auth |
Configurationβ
| Variable | Description |
|---|
FILE_PROVIDER | Storage backend |
MAX_FILE_SIZE | Maximum upload size (bytes) |
Related Pagesβ