What methods can I use to securely handle user uploads on my website?

Example Concept: Secure file handling involves validating the file type using a whitelist approach, such as allowing only specific MIME types like "image/jpeg" or "application/pdf". Additionally, files should be scanned for malware and stored outside the web root to prevent direct access. Use Content Security Policy (CSP) headers to restrict the execution of uploaded files.