Skip to content

Internal: Sanitize file upload#31812

Merged
asafdl merged 8 commits intomainfrom
ED-19588
Jul 13, 2025
Merged

Internal: Sanitize file upload#31812
asafdl merged 8 commits intomainfrom
ED-19588

Conversation

@asafdl
Copy link
Copy Markdown
Contributor

@asafdl asafdl commented Jul 10, 2025

✨ PR Description

Purpose: Add file upload security validation to prevent path traversal attacks in the image import functionality.
Main changes:

  • Added is_uploaded_file() validation before reading file contents to prevent unauthorized file access
  • Set default file_content to false to handle invalid upload cases safely

Generated by LinearB AI and added by gitStream.
AI-generated content may contain inaccuracies. Please verify before using. We'd love your feedback! 🚀

gitstream-cm[bot]

This comment was marked as resolved.

gitstream-cm[bot]

This comment was marked as resolved.

gitstream-cm[bot]

This comment was marked as resolved.

gitstream-cm[bot]

This comment was marked as resolved.

gitstream-cm[bot]

This comment was marked as resolved.

gitstream-cm[bot]

This comment was marked as resolved.

gitstream-cm[bot]

This comment was marked as resolved.

Copy link
Copy Markdown
Contributor

@RobiFerentz RobiFerentz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@asafdl asafdl merged commit 3e6c570 into main Jul 13, 2025
51 checks passed
@asafdl asafdl deleted the ED-19588 branch July 13, 2025 06:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants