Skip to content

Document breaking change from CVE#12587

Merged
sdwheeler merged 1 commit intoMicrosoftDocs:mainfrom
sdwheeler:sdw-w540452-cve-iwr-irm
Dec 16, 2025
Merged

Document breaking change from CVE#12587
sdwheeler merged 1 commit intoMicrosoftDocs:mainfrom
sdwheeler:sdw-w540452-cve-iwr-irm

Conversation

@sdwheeler
Copy link
Copy Markdown
Collaborator

@sdwheeler sdwheeler commented Dec 16, 2025

PR Summary

Document breaking change from CVE

PR Checklist

  • Descriptive Title: This PR's title is a synopsis of the changes it proposes.
  • Summary: This PR's summary describes the scope and intent of the change.
  • Contributor's Guide: I have read the contributor's guide.
  • Style: This PR adheres to the style guide.

Copilot AI review requested due to automatic review settings December 16, 2025 18:26
@learn-build-service-prod
Copy link
Copy Markdown
Contributor

PoliCheck Scan Report

The following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans.

✅ No issues found

More information about PoliCheck

Information: PoliCheck | Severity Guidance | Term
For any questions: Try searching the learn.microsoft.com contributor guides or post your question in the Learn support channel.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR documents a breaking change introduced by a security update for CVE-2025-54100, which modifies the default behavior of the Invoke-WebRequest cmdlet to require user confirmation before parsing web page content that might contain executable scripts.

  • Updates the warning documentation to describe the new confirmation prompt behavior
  • Adds details about the security update and how to bypass the prompt using -UseBasicParsing
  • Updates the documentation date to reflect the current revision

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread reference/5.1/Microsoft.PowerShell.Utility/Invoke-WebRequest.md
Comment thread reference/5.1/Microsoft.PowerShell.Utility/Invoke-WebRequest.md
@learn-build-service-prod
Copy link
Copy Markdown
Contributor

Learn Build status updates of commit 7e9ea02:

✅ Validation status: passed

File Status Preview URL Details
reference/5.1/Microsoft.PowerShell.Utility/Invoke-WebRequest.md ✅Succeeded View (powershell-5.1)

For more details, please refer to the build report.

@sdwheeler sdwheeler merged commit a6e6205 into MicrosoftDocs:main Dec 16, 2025
14 checks passed
@sdwheeler sdwheeler deleted the sdw-w540452-cve-iwr-irm branch December 17, 2025 20:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants