security-patch

Defense-in-depth module that blocks the PolyShell unrestricted file upload attack with layered checks: request/media path blocking, strict filename/extension validation, and polyglot content detection. Provides Composer install steps, admin-configurable allow/block lists, logging, and migration from markshust/polyshell-patch.