Form Security
Shopify File Upload Security Check
File uploads on your Shopify store can be a vector for attackers. Check that strict validations are in place to limit risks.
What this test checks
This test checks the security of file uploads on your Shopify store (e.g., product images, customer downloads). Insufficient validations can allow attackers to upload malicious files, execute scripts, or compromise your site.
Our recommendation
Implement strict validation of uploaded files (MIME type, extension, size). Use Shopify's built‑in security settings to limit allowed file types. Regularly scan uploaded files for suspicious content.
Security tests
Read more
Sensitive Files