# File Security

## Purpose

Protect uploaded documents.

---

# File Types

Potential uploads:

- PDF.
- DOCX.
- Images.
- Portfolio files.

---

# Validation

Check:

- File type.
- File size.
- File contents.

Never trust extensions.

---

# Processing

Uploaded files may contain:

- Malicious content.
- Embedded scripts.
- AI prompt injection.

Treat as untrusted.

---

# Storage

Requirements:

- Secure naming.
- Access control.
- User ownership checks.

---

# PDF Processing

Never directly trust extracted text.