Never Trust file.type or File Extensions
An attacker can easily rename malware.exe to resume.pdf. Before accepting any CV or project deliverable, our server inspects the actual binary magic bytes (%PDF-, PK\x03\x04, PNG/JPEG headers) and rejects any executable or script payload.