[2.3] moved a security chexk in HttpUploadedFile

closes #6802