More than a file-extension check
A .pdf extension alone does not prove that a file actually contains a PDF. DevPayload inspects beginning and ending file slices, checks the %PDF signature and %%EOF marker, and can identify several common alternative file signatures without uploading the selected files.