Protection from unauthorized file upload in product/product/upload