@brian on WordPress.org
Mentioned in [5838] on Core SVN:More upload escaping.
Mentioned in [2531] on Core SVN:LIMIT 1 in the whitelist query.