filenames or URLs, and reject all other inputs.
Consider storing the uploaded files outside of the web document root entirely. Then, use
other mechanisms to deliver the files dynamically. [R.434.2]
Define a very limited set of allowable extensions and only generate filenames that end