strict mime checking is enabled