The live RFQ form accepts written project details but does not accept files. This prevents unscanned buyer documents from entering the website or becoming publicly reachable.
A future upload feature must enforce file-count, size and detected-type limits, randomize storage names, keep originals outside the public web root and prevent staff access until a quarantine and malware-scanning route is verified. Until then, Sports Filter will confirm an appropriate transfer route during direct follow-up.