SECURITY: Do checks on all upload types

Also, verify file before stashing it

Change-Id: I5dd027acc994cf7308c9e4d85a61237d802ccee8