silverstripe / silverstripe-asset-admin

        // CSRF check

        $token = SecurityToken::inst();

        if (empty($data[$token->getName()]) || !$token->check($data[$token->getName()])) {

            return new HTTPResponse(null, 400);

        }

        $tmpFile = $data['Upload'];

        if (empty($data['ID']) || empty($tmpFile['name']) || !array_key_exists('Name', $data)) {

            return new HTTPResponse('Invalid request', 400);

        // CSRF check

        $token = SecurityToken::inst();

        if (empty($data[$token->getName()]) || !$token->check($data[$token->getName()])) {

            return new HTTPResponse(null, 400);

        }

        // Check parent record

        /** @var Folder $parentRecord */