A safer file-upload security assignment

Start with an observable result

A sound brief for application teams accepting customer documents or media names the behavior that should be different when the work is complete: an upload path with bounded files, isolated processing, and clear rejection states. Write the affected users, starting condition, acceptance check, and reviewer beside the first ticket.

Keep the first slice narrow enough that another engineer can understand the change in one review. State what is deliberately out of scope so a useful implementation does not quietly become an architecture project.

• Name the internal reviewer.
• Use representative or synthetic data.
• Set the review point before the work begins.

Shape the assignment around content checks, size limits, storage keys, malware scanning, and access control

Break the work into checks that support the result rather than a list of technologies. For this lane, the important questions are how content checks, size limits, storage keys, malware scanning, and access control affect behavior, ownership, and the next handoff.

Ask the developer to produce fixtures for type spoofing, oversized files, private objects, and failed scans. That evidence should be tied to the changed path, not presented as a generic activity report.

Make access and decisions explicit

Begin with named accounts and the smallest repository, environment, and data scope needed for the first slice. Architecture choices, production approval, security exceptions, and accepted risk remain with the buyer-side owner.

The main caution is trusting a filename or browser-provided content type as a security decision. If the work reaches that boundary, pause the normal implementation and ask the named owner to decide the safe next action.

• Write one stop rule for sensitive or irreversible changes.
• Record assumptions beside the pull request.
• Keep unresolved questions assigned to a person.

Review evidence before widening scope

Review the changed behavior, the evidence, the known limitation, and the handoff in that order. The goal is to confirm an upload path with bounded files, isolated processing, and clear rejection states, not merely to confirm that code or configuration changed.

If the first slice is sound, expand one related path at a time and keep the same evidence standard. That makes a distributed working relationship easier to manage across time zones and easier for the internal team to own.

Questions about assessing Philippine developers