FileUploadOptions

Is true if file upload should be allowed for anonymous users.

Is true if file upload should be allowed for authenticated users.

Is true if file upload should be allowed for anyone, regardless of user authentication.

Sets the allowed file extensions for uploading files. The extension is defined as an array of file extensions, or a regex pattern.

It is recommended to restrict the file upload extensions as much as possible. HTML files are especially problematic as they may be used by an attacker who uploads a HTML form to look legitimate under your app's domain name, or to compromise the session token of another user via accessing the browser's local storage.

Defaults to ^(?!(h|H)(t|T)(m|M)(l|L)?$) which allows any file extension except HTML files.