diff --git a/backend/scripts/repl b/backend/scripts/repl
index 351accaac..61cee99fc 100755
--- a/backend/scripts/repl
+++ b/backend/scripts/repl
@@ -26,7 +26,7 @@ export PENPOT_FLAGS="\
        enable-soft-rpc-rlimit \
        enable-webhooks \
        enable-access-tokens \
-       disable-file-validation";
+       enable-file-validation";
 
 # export PENPOT_DATABASE_URI="postgresql://172.17.0.1:5432/penpot"
 # export PENPOT_DATABASE_USERNAME="penpot"
diff --git a/backend/scripts/start-dev b/backend/scripts/start-dev
index 6322a27b3..78fdd4ee6 100755
--- a/backend/scripts/start-dev
+++ b/backend/scripts/start-dev
@@ -12,13 +12,12 @@ export PENPOT_FLAGS="\
        enable-audit-log \
        enable-transit-readable-response \
        enable-demo-users \
-       enable-file-validation \
        enable-feature-fdata-pointer-map \
        enable-feature-fdata-objects-map \
        disable-secure-session-cookies \
        enable-smtp \
        enable-access-tokens \
-       disable-file-validation";
+       enable-file-validation";
 
 # Initialize MINIO config
 mc alias set penpot-s3/ http://minio:9000 minioadmin minioadmin