Uploaded filesUploaded file metadata should be validated, then accepted files moved to an application-controlled location.