Search the bundled extension-to-media-type registry. Detection by extension alone is not a security check.
JavaScript is required. File-service operations request explicit consent before upload.