file-handling-uploads

Apply when reviewing or writing code that accepts file uploads, processes user-supplied files, or serves stored files. Covers extension validation, content verification, filename security, storage isolation, and scanning.