[HttpFoundation] UploadedFile - moved a security check