Are file uploads checked for spam / phishing?