---
name: validate-unsafe-upload
description: Evidence bar for unsafe file upload and server-side processing of uploads. Use when validating a finding that claims an uploaded file is stored, served or processed unsafely.
---

# Validate unsafe file upload

- Establish the storage or processing outcome relevant to the finding. An accepted upload or returned URL alone does not establish unsafe processing or execution.
- Limit analysis to the consumers and restrictions that explain the reported impact; do not require tracing unrelated processing stages or reaching a stronger execution outcome.