cgi-io: require whitelisting upload locations