Add notes about TypeData and FormatData commands#13094
Conversation
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
There was a problem hiding this comment.
Pull request overview
This PR updates PowerShell security documentation to warn that restricted remoting endpoints (including JEA) must not expose TypeData/FormatData modification commands because they can introduce FullLanguage-evaluated script content.
Changes:
- Add new “Don’t allow commands that add TypeData or FormatData” guidance to two restricted-session security articles.
- Add new warning callouts to
Update-TypeDataandUpdate-FormatDatacmdlet reference docs. - Refresh
ms.datemetadata on the touched pages.
Reviewed changes
Copilot reviewed 4 out of 4 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
| reference/docs-conceptual/security/securing-restricted-sessions.md | Adds guidance to block TypeData/FormatData-modifying commands in restricted sessions. |
| reference/docs-conceptual/security/remoting/jea/security-considerations.md | Adds the same guidance in the JEA security considerations page. |
| reference/7.4/Microsoft.PowerShell.Utility/Update-TypeData.md | Adds a warning callout about restricted endpoints and Update-TypeData. |
| reference/7.4/Microsoft.PowerShell.Utility/Update-FormatData.md | Adds a warning callout about restricted endpoints and Update-FormatData, and reflows the existing Notes text. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
Learn Build status updates of commit f2bb6f4: ✅ Validation status: passed
For more details, please refer to the build report. |
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
PoliCheck Scan ReportThe following report lists PoliCheck issues in PR files. Before you merge the PR, you must fix all severity-1 and severity-2 issues. The AI Review Details column lists suggestions for either removing or replacing the terms. If you find a false positive result, mention it in a PR comment and include this text: #policheck-false-positive. This feedback helps reduce false positives in future scans. ✅ No issues foundMore information about PoliCheckInformation: PoliCheck | Severity Guidance | Term |
|
Learn Build status updates of commit 335452c: ✅ Validation status: passed
For more details, please refer to the build report. |
PR Summary
Add notes about TypeData and FormatData commands
PR Checklist