ABSTRACT
Allowing untrusted file uploads from anonymous users is one of the most risky actions for an application to allow; however, it is also one of the most expected features of an application. One of the most common tasks users engage in is the uploading, downloading, and sharing of files. Here, security is at odds with user needs. To address this problem, there are several well-established guidelines for handling user uploaded files that can, if followed, keep the application and web server safe from malicious attack.
