server/upload.py,upload-health.py: do not allow arbitrary code coming from network