GovTech Interview Question

How do file upload attacks work?