Function classify_upload 

pub fn classify_upload(
    data: &[u8],
    max_bytes: usize,
) -> Result<&'static str, UploadReject>

The whole acceptance decision: which extension the payload earns, or why it is refused. Pure — sniffs magic bytes only, so a client-supplied name or Content-Type can never widen acceptance.