Bug fix : Arbitrary file upload vulnerability