File Upload Policy Tester
Test allowed extensions, signatures and size rules on local fixtures without executing files.
Decisions & evidence
Load the worked example or open your own input.
Start with the worked example. Edit your input or settings, inspect the result, and open Export for task files or a complete ZIP. Save project keeps editable text and settings; image/file projects need their original source files when reopened.
Using File Upload Policy Tester
Test allowed extensions, signatures and size rules on local fixtures without executing files.
- Select Try example to see a complete file upload policy tester workflow. Use the editable worked example as the JSON structure, or open a local JSON/YAML text fixture. File inspectors accept their stated local formats.
- Adjust the labelled controls or open Input/Geometry to change the evidence. Run workflow applies the current input; undo and redo restore text/settings decisions.
- Inspect the task preview, record details and method notes. Findings describe cases that need review; missing evidence remains unknown.
- Open Export for task artifacts, JSON/CSV results or a complete ZIP. Save project keeps input/settings; projects with local binary files need their original files to be reselected when reopened.
Example
The worked example for File Upload Policy Tester produces 3 evidence records and 1 task artifacts. Compares actual selected bytes, suffixes and size against your policy using the existing signature inspector. Header compatibility does not establish safety; archives, codecs and payload content need deeper validation.
Questions & answers
What does File Upload Policy Tester do?
Compares actual selected bytes, suffixes and size against your policy using the existing signature inspector. Header compatibility does not establish safety; archives, codecs and payload content need deeper validation.
What should I open or paste?
Use the editable worked example as the JSON structure, or open a local JSON/YAML text fixture. File inspectors accept their stated local formats. The worked example defines the supported input fields. Edit its values, run the workflow and inspect the method notes before exporting. Each selected file must be nonempty and at most 25 MiB, with at most 30 files and 80 MiB total. Image jobs use up to 12 still frames, six million pixels per image and 18 million total pixels. Individual format inspectors may apply stricter limits.
What results can I export?
The Export view includes the task-specific artifacts listed for your actual result, a typed JSON report, a CSV table and a complete ZIP. Save project stores editable input and settings; selected binary sources are represented by fingerprints and must be reselected. Secret-option values are excluded from saved projects.
Does it upload files, run commands or change a live system?
Processing uses your supplied evidence in this browser. Planners and protocol tools do not connect to services, execute imported code or apply changes automatically. Public pages include the site’s approved advertising and optional consent-based analytics.
Related tools
A useful next step for your task.
Text & WritingJSON RedactorPrepare a JSON example for sharing. Mask selected field names or exact paths while preserving large numbers, duplicate keys and array positions.
Developer & DataHAR Privacy RedactorRemove common secrets from a pasted HAR archive, strip request and response bodies and inspect a field-removal ledger before sharing.
Developer & DataScreenshot Privacy Redaction WorkbenchMark repeated sensitive regions; irreversibly flatten approved masks; verify exported pixels.
Developer & DataSecret Exposure Scan for Source PackagesScan chosen files with transparent patterns; mask findings; export remediation locations.
Help improve this tool
Report a problem or suggest an improvement
Describe the issue without pasting private tool input. Feedback goes to our admin inbox.