Integrity checks for file uploads are in place now, and content-type is derived from filename on upload.