What are best practices for securely handling file uploads on a website?

Example Concept: Secure file upload handling involves validating file types, checking file size limits, and storing files outside the web root. Use server-side checks to ensure files are not executable and employ Content Security Policy (CSP) to mitigate risks. Headers like Content-Disposition and X-Content-Type-Options can further enhance security by controlling how files are handled by the browser.