Translations:Manual:Security/112/en

For full security it is best to have uploads served from an entirely separate domain, not a subdomain, but even a subdomain will provide additional security.