I would:

1. Make sure its actually a dict
2. Make sure the values are valid base64
3. Enforce size limits

Don't worry about removing network-related files I don't think. _Maybe_ do some sort of sanity checking on the paths, but I wouldn't worry overly about it right now.