[WW-5371] Use action based callback to transfer information about uploaded files

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 6.4.0
• Component/s: Core Interceptors
• Assignee: Lukasz Lenart
• Reporter: Lukasz Lenart
• Created: 10/Dec/23 12:18
• Updated: 20/Apr/24 11:59
• Resolved: 15/Dec/23 09:07

Description

Based on experience of the latest security vulnerability (CVE-2023-50164) it would be better to keep uploaded files out of scope of passed parameters.

The idea is to have a dedicated interceptor and *Aware interface instead of using parameter injection as it happens currently.

Issue Links

• links to: GitHub Pull Request #223
• links to: GitHub Pull Request #808