BZ 1134313 - security review, Improper File Type Validation