{
  "id": 10214543,
  "title": "When an Upload Form Becomes a Foothold: Broad S3 Write Scope",
  "url": "https://urgent.news/2026/09/27/when-an-upload-form-becomes-a-foothold-broad-s3-write-scope",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-27T12:47:03.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/bala_paranj_059d338e44e7e/when-an-upload-form-becomes-a-foothold-broad-s3-write-scope-cnb"
  },
  "original_language": "en",
  "account": "The problem with the upload form is that it allows users to upload files to any key that starts with \"files/\". This includes files like \"files/admin.html\" and \"files/../etc/passwd\" which can lead to unintended consequences such as overwriting unrelated objects or accessing sensitive data. The policy should use an exact key match instead of a prefix match to prevent this.",
  "summary": "✓ Human-authored analysis; AI used for formatting and proofreading. A signed POST form is the standard pattern for letting a browser upload a file directly to S3 without routing the bytes through your servers. When it works, it works beautifully. When the policy authorising the POST is too broad, every signed URL the server hands out is a write primitive on the entire bucket prefix. Four…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}