Why uploads require protection

Artist OS may receive audio, artwork and profile images from users. Upload controls should verify the real file type, allowed extension and file size before storage.

  • Allow only the file formats required by the feature.
  • Generate safe server-side filenames.
  • Reject executable files and double extensions.
  • Store uploads outside executable application folders where possible.
  • Set reasonable size limits.
  • Do not trust a browser-provided MIME type by itself.

Operational review

Investigate files that cannot be previewed, have misleading extensions or trigger repeated upload errors.

Never execute uploads

User-uploaded content must be treated as untrusted data, not as application code.