Repository navigation

Fix - Restrict file upload sideloading and enforce extension validation - #2374

Merged

Intenzi merged 2 commits into

fix/upload-security-fixes

Oct 1, 2026

Merged

Fix - Restrict file upload sideloading and enforce extension validation#2374
Intenzi merged 2 commits into
developfrom
fix/upload-security-fixes

Commits on Sep 30, 2026
- fix: strictly validate file extension and remove MIME type regex fallback in is_valid_type
  Intenzi
  committed
  62baca7
- fix: restrict file uploads to standard multipart $_FILES to prevent arbitrary sideloading
  Intenzi
  committed
  90fdb0c