How to validate upload file secure or not malicious file how to restrict

Hi i have the same issue and find out that we can validate file with metadata and magic byte.
but i am not sure how to implement in module file. or should i use hook.

if some one know the best way please describe.

i have PDF file with XSS content, with metadata: yes

I solved above issue custom hook added in the module.
Run : composer require smalot/pdfparser