Skip to content

Fix - Restrict file upload sideloading and enforce extension validation - #2374

Merged
Intenzi merged 2 commits into
developfrom
fix/upload-security-fixes
Oct 1, 2026
Merged

Intenzi merged 2 commits into
developfrom
fix/upload-security-fixes

fix: restrict file uploads to standard multipart $_FILES to prevent a…

90fdb0c
Select commit
Loading
Failed to load commit list.
WIP / WIP succeeded Sep 30, 2026 in 1s

Ready for review

No match found based on configuration

Details

By default, WIP only checks the pull request title for the terms "WIP", "Work in progress" and "🚧".

You can configure both the terms and the location that the WIP app will look for by signing up for the pro plan: https://github.com/marketplace/wip. All revenue will be donated to Processing | p5.js – one of the most diverse and impactful Open Source community there is.