(1. Analysis of path traversal vulnerabilities 2. Breaking tamper-proof continuous uploading 3. Breaking local verification and continuous uploading... And there are specific penetration/penetration tests such as... It is definitely worth a look... Thank the author for writing such a good paper.
Warm Moon-Web Use Safety Anthology 1.pdf)