Which statement best describes the purpose of secure file upload?

A. trusting file extension only B. allowing executable uploads anywhere C. validating type, size, content and storage location of uploaded files D. storing uploads in web root with execute permission