Add note about untrusted data#12885
Conversation
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
There was a problem hiding this comment.
Pull request overview
This PR updates PowerShell reference documentation to warn readers about security risks when using certain parameters/operators with untrusted input, and refreshes associated metadata/links across multiple versioned doc sets.
Changes:
- Add repeated
[!IMPORTANT]notes warning against using select parameters/operators with untrusted data (with an OWASP “Validate All Inputs” reference). - Update
ms.datefront matter in the touched docs. - Minor formatting/wording tweaks (line wrapping, contractions, link target updates in a few places).
Reviewed changes
Copilot reviewed 17 out of 17 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| reference/7.6/Microsoft.PowerShell.Management/Start-Process.md | Adds untrusted-input security notes to relevant parameters; updates ms.date. |
| reference/7.6/Microsoft.PowerShell.Management/Invoke-Item.md | Adds untrusted-input warning for -Path; minor formatting/link updates; updates ms.date. |
| reference/7.6/Microsoft.PowerShell.Core/Invoke-Command.md | Adds untrusted-input security notes for parameters; updates ms.date. |
| reference/7.6/Microsoft.PowerShell.Core/About/about_Operators.md | Adds untrusted-input warning for call operator &; adjusts link refs; updates ms.date. |
| reference/7.5/Microsoft.PowerShell.Management/Start-Process.md | Adds untrusted-input security notes to relevant parameters; updates ms.date. |
| reference/7.5/Microsoft.PowerShell.Management/Invoke-Item.md | Adds untrusted-input warning for -Path; updates ms.date. |
| reference/7.5/Microsoft.PowerShell.Core/Invoke-Command.md | Adds untrusted-input security notes for parameters; updates ms.date. |
| reference/7.5/Microsoft.PowerShell.Core/About/about_Operators.md | Adds untrusted-input warning for call operator &; adjusts link refs; updates ms.date. |
| reference/7.4/Microsoft.PowerShell.Management/Start-Process.md | Adds untrusted-input security notes to relevant parameters; updates ms.date. |
| reference/7.4/Microsoft.PowerShell.Management/Invoke-Item.md | Adds untrusted-input warning for -Path; minor formatting/link updates; updates ms.date. |
| reference/7.4/Microsoft.PowerShell.Core/Invoke-Command.md | Adds untrusted-input security notes for parameters; updates ms.date. |
| reference/7.4/Microsoft.PowerShell.Core/About/about_Operators.md | Adds untrusted-input warning for call operator &; adjusts link refs; updates ms.date. |
| reference/5.1/Microsoft.PowerShell.Management/Start-Process.md | Adds untrusted-input security notes to relevant parameters; updates ms.date. |
| reference/5.1/Microsoft.PowerShell.Management/Show-EventLog.md | Adds untrusted-input warning for -ComputerName; streamlines wording/formatting. |
| reference/5.1/Microsoft.PowerShell.Management/Invoke-Item.md | Adds untrusted-input security notes for parameters; updates ms.date and link target. |
| reference/5.1/Microsoft.PowerShell.Core/Invoke-Command.md | Adds untrusted-input security notes for parameters; updates ms.date. |
| reference/5.1/Microsoft.PowerShell.Core/About/about_Operators.md | Adds untrusted-input warning for call operator &; adjusts link refs; updates ms.date. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
|
Learn Build status updates of commit aeeac2d: ✅ Validation status: passed
For more details, please refer to the build report. |
PR Summary
Add note about untrusted data
PR Checklist