Media upload blocked by default for security purposes