    public function rules()
    {
        return [
            'upload_receipt' => [
                'nullable',
                new Base64Mime(['gif', 'jpg', 'png'])
            ]
        ];
    }
The software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.