prevent NPE in public upload