Actually, you alre already doing that: `validates_attachment_content_type`