File Upload Security
User-uploaded files are one of the highest-leverage attack surfaces. A single endpoint that accepts * MIME types and writes to a server-served path is a path to RCE, XSS, SSRF, stored-XSS in PDFs, and a half-dozen other failure modes. The defaults of every web framework do less than they should — this skill is what to add on top.
Generic, not CMS-specific. For Payload-specific tuning see payload-cms-security. For WordPress see
[Description truncada. Veja o README completo no GitHub.]