---
name: validate-file-read
description: Evidence bar for reading files from the server. Use when validating a finding that claims local file inclusion, path traversal or arbitrary file read.
---

# Validate file read

- Require exact target-file bytes and distinguish them from attacker-controlled reflection.
- Limit claims about arbitrary paths, permissions and filesystem boundaries to what the evidence establishes.
- Avoid indiscriminate filesystem collection. Preserve a short exact excerpt and the triggering request, and report broader access only when path control and permissions support it.