Validate MIME Type of Attachments from Inbound Emails

reference australia Updated Sep 10, 2026 1 min read sc-validate-mime-type-of-attachments-from-inbound-emails.md
Raw file servicenow.com

Use a system property to validate attachments uploaded from inbound emails.

Set the glide.security.file.mime_type.validation.inbound_email system property to true to perform MIME type validation on attachments uploaded from inbound emails. Validating the MIME type of uploaded files helps to ensure that the file content matches the expected file format.

Set the system property value to true to perform MIME type validation. If the system property is not present on your instance, the fallback value is false.

More information

Attribute

Description

Configuration name

glide.security.file.mime_type.validation.inbound_email

Configuration type

System Properties (/sys_properties_list.do)

Data type

Boolean

Recommended value

true

Default value

false

Fallback value

false

Category

File and resources

Security risk

  • Severity score: 3.7
  • CVSS score: Low
  • Security risk details: If MIME type validation does not occur, users can upload an unexpected type of file to your instance, resulting in potential vulnerabilities where the attachment is handled.

Dependencies and prerequisites

None

Functional impact

Attachments from inbound emails are not uploaded if the MIME type does not validate correctly.

**Parent Topic:**[File and resources](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-file-resources.md)
Search documentation
Search document titles and file paths on the australia branch