raymondcamden’s Twitter Archive—№ 65,389

Security folks - what is the point of an API asking for a MIME type for an uploaded file? I'd assume the back end API won't trust what I say anyway and will verify, so why make me specify it?