#397 forbiddenUploadFiles array