FileUploadOptions

Sets the allowed hostnames for file URLs referenced in Parse objects. When a File object includes a URL, its hostname must match one of these entries to be accepted. Supports exact hostnames (e.g., 'cdn.example.com') and wildcard subdomains (e.g., '*.example.com'). Use ['*'] to allow any domain. Use [] to block all file URLs (only name-based files allowed).

Is true if file upload should be allowed for anonymous users.

Is true if file upload should be allowed for authenticated users.

Is true if file upload should be allowed for anyone, regardless of user authentication.

Sets the allowed file extensions for uploading files. The extension is defined as an array of file extensions, or a regex pattern.

It is recommended to restrict the file upload extensions as much as possible. HTML files are especially problematic as they may be used by an attacker who uploads a HTML form to look legitimate under your app's domain name, or to compromise the session token of another user via accessing the browser's local storage.

Defaults to ^(?![xXsS]?[hH][tT][mM][lL]?$) which allows any file extension except those MIME types that are mapped to text/html and are rendered as website by a web browser.