juprodh.bsky.social / lichen.wiki
🌿 Collaborative wiki on ATProto lichen.wiki
atproto
12
fork

Configure Feed

Select the types of activity you want to include in your feed.

Blob resolver: no CID validation #2

open opened by blooym.dev

The blob resolver does not attempt to validate blob content identifiers after fetch, which allows users to modify the blob locally on their PDS to be any content they wish without updating any records. It would be a good idea to compute a hash of the downloaded blob after fetch and ensure it matches the requested CID.

juprodh.bsky.social

Thanks for the issue, currently looking at it

juprodh.bsky.social

Fixed in https://tangled.org/juprodh.bsky.social/lichen.wiki/commit/fbf06e1363fcb548b2ab9eee3d04341c09535ba2

sign up or login to add to the discussion
Labels

None yet.

assignee

None yet.

Participants 2
AT URI
at://did:plc:p5yjdr64h7mk5l3kh6oszryk/sh.tangled.repo.issue/3mkighedkch22