Shared on Mage Dispatch · 21 Apr 2026

PolyShell Protection Module (APSB25-94)

Defense-in-depth module that blocks the PolyShell unrestricted file upload attack with layered checks: request/media path blocking, strict filename/extension validation, and polyglot content detection. Provides Composer install steps, admin-configurable allow/block lists, logging, and migration from markshust/polyshell-patch.

9
64
Visit link → https://github.com/aregowe/magento2-module-polyshell-protection

More like this

New here? This is Mage Dispatch

Mage Dispatch is a community-run archive and bi-weekly newsletter for the Magento, Adobe Commerce and Mage-OS ecosystem. Modules, articles, security advisories and tools, hand-picked by developers and shared so good work does not disappear into the void.

Browse the latest links → Explore by topic → Submit a link → About us →