Skip to content

Conversation

dimodi
Copy link
Contributor

@dimodi dimodi commented Sep 26, 2025

No description provided.

@dimodi dimodi requested review from a team as code owners September 26, 2025 13:57
@dimodi dimodi added the merge-to-production Use this label to get a comment to choose whether to merge the PR to production label Sep 26, 2025
Copy link
Contributor

Hello @dimodi,

Check the below option if you would like to automatically generate PR to production. The automation uses the branch for the cherry-pick, and then will delete the branch. Please, do not delete it manually.

  • create PR to production

#server-security-note

>warning File upload and remove controllers can create application vulnerabilities. Learn about all possible security risks and how to avoid them. Do not trust any part of the upload or remove request and implement server-side validation.
>warning File handling, saving and deletion can create application vulnerabilities. This includes upload and remove controllers. Learn about all possible security risks and how to avoid them. Do not trust the user files or requests, and implement server-side validation.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
>warning File handling, saving and deletion can create application vulnerabilities. This includes upload and remove controllers. Learn about all possible security risks and how to avoid them. Do not trust the user files or requests, and implement server-side validation.
>warning File handling, saving, and deletion can create application vulnerabilities. This includes uploading and removing controllers. Learn about all possible security risks and how to avoid them. Do not trust the user files or requests, and implement server-side validation.

Copy link
Contributor Author

@dimodi dimodi Sep 29, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This suggestion changes the meaning of the sentence. I made another improvement, however.

@dimodi dimodi merged commit cae4f0a into master Sep 29, 2025
Copy link
Contributor

Here you are the link to your PR to production: #3268

@github-actions github-actions bot deleted the fileselect-validation branch September 29, 2025 13:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
merge-to-production Use this label to get a comment to choose whether to merge the PR to production
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants