File uploads are powerful, but they also introduce security concerns. Formbase stores files in your S3-compatible bucket and returns a signed URL for access. Use the practices below to keep uploads secure.Documentation Index
Fetch the complete documentation index at: https://docs.formbase.dev/llms.txt
Use this file to discover all available pages before exploring further.
Keep buckets private
Store files in private buckets and rely on signed URLs for access instead of public objects.
Validate on the client
Enforce file size and type limits in your UI to prevent accidental or malicious uploads.
Formbase does not inspect file contents or enforce MIME types. If you need strict controls, validate before forwarding uploads.