Distrust the Declared MIME Type

code Cyber ops military_tech OPERATIVE-3
info
You are not signed in.

You can read the task, take hints and check your answer — but nothing is saved. No XP, no skill points, and this task will not be marked complete.

assignment Your task

The browser sends `Content-Type: image/png`. Why must the server not rely on it?

What this proves: Verify file type from content, not from client-declared metadata.

terminal Code / Terminal Workspace

lightbulb Progressive Hints

Need assistance? You can reveal sequential hints. Each hint applies a minor penalty to your score.

Hint #1 (-10 XP penalty)

menu_book Full Solution Walkthrough

If you are completely stuck, you can unlock the full step-by-step walkthrough.