Sorry about that. That one fell through the cracks because there was a security issue touching the same code path and I didn’t want to generate noise in the process. I’ve re-opened the PR and updated it.
https://github.com/discourse/discourse/pull/37876
Will merge once it’s 
and reviewed 
.