Arbitrary file read and remote code execution in Active Storage

Write your take first — we'll ask for email only when you're ready to publish.