Check if arbitrary files can be referenced in REST POST request, access bypass

Check if the Drupal 8 core issue at #2587957: Arbitrary files can be referenced in file fields even if validation using form API would fail also applies to RESTWS, write patch if needed.