Os command injection on vm download feature

...

Client-side enforcement of server-side security related to vm download feature

...