Unrestricted file content type on upload

The security rules do not validate the Content-Type (MIME type) of uploaded files. This allows users to upload any file type