diff --git a/core/lib/Foswiki/UI/Upload.pm b/core/lib/Foswiki/UI/Upload.pm
index 2925b133e8..bebf154093 100644
--- a/core/lib/Foswiki/UI/Upload.pm
+++ b/core/lib/Foswiki/UI/Upload.pm
@@ -101,6 +101,8 @@ sub _upload {
     my $topic = $session->{topicName};
     my $user  = $session->{user};
 
+    Foswiki::UI::checkValidationKey( $session, 'upload', $web, $topic );
+
     my $hideFile    = $query->param('hidefile')    || '';
     my $fileComment = $query->param('filecomment') || '';
     my $createLink  = $query->param('createlink')  || '';