dutchcoders/transfer.sh
1
0
Fork 0
mirror of https://github.com/dutchcoders/transfer.sh.git synced 2026-02-03 14:13:26 +00:00
Code Issues 48 Actions Packages Projects Releases Wiki Activity

Feature: Check hash before web upload #166

New Issue
Closed
opened 2026-01-19 18:29:15 +00:00 by michael · 3 comments
michael commented 2026-01-19 18:29:15 +00:00
Owner
Copy Link

Originally created by @wc7086 on GitHub.

Verify the hash when uploading on the web, and save the hash field in the metadata. And display the hash field in the web interface. When using curl to upload, provide an upload option similar to -H "sha1: <value>".

Originally created by @wc7086 on GitHub. Verify the hash when uploading on the web, and save the hash field in the metadata. And display the hash field in the web interface. When using curl to upload, provide an upload option similar to `-H "sha1: <value>"`.
michael commented 2026-01-19 18:29:16 +00:00
Author
Owner
Copy Link

@wc7086 commented on GitHub:

what would the goal of implementing this?

Gives the user a way to verify that the downloaded file is complete and correct. I don't know if providing hash on the download page is redundant, maybe we should wait until more people care about this option before deciding?

@wc7086 commented on GitHub: > what would the goal of implementing this? Gives the user a way to verify that the downloaded file is complete and correct. I don't know if providing hash on the download page is redundant, maybe we should wait until more people care about this option before deciding?
michael commented 2026-01-19 18:29:16 +00:00
Author
Owner
Copy Link

@paolafrancesca commented on GitHub:

The problem is that you have to trust the server: a malicious server could just receive and return the provided hash even after tampering the upload, and you should donwload the file a check his hash locally in order to be sure this didn't happen.

@paolafrancesca commented on GitHub: The problem is that you have to trust the server: a malicious server could just receive and return the provided hash even after tampering the upload, and you should donwload the file a check his hash locally in order to be sure this didn't happen.
michael commented 2026-01-19 18:29:16 +00:00
Author
Owner
Copy Link

@paolafrancesca commented on GitHub:

@wc7086 what would the goal of implementing this?

@paolafrancesca commented on GitHub: @wc7086 what would the goal of implementing this?
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
docker
enhancement
hacktoberfest
help wanted
invalid
question
storage provider
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
michael
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dutchcoders/transfer.sh#166
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?