File Upload Validation Rules and Restricted File Types

To improve platform security, the file upload process has been updated to block potentially unsafe file types. Files with the following extensions can no longer be uploaded, whether directly or within ZIP files: js, vbs, exe, bat, cmd, ps1, sh, py, rb, pl, scr, jar, msi.

These file types are commonly associated with executable scripts and applications that may pose security risks and as such must be restricted from upload.

This is in addition to the pre-existing validation rules: all files must have a file extension; the extension must contain only alphanumeric characters (A–Z, 0–9); and the extension must be listed on the Approved Filetypes Page.