diff options
| author | Stefan Boberg <[email protected]> | 2026-03-20 18:20:36 +0100 |
|---|---|---|
| committer | Stefan Boberg <[email protected]> | 2026-03-20 18:20:36 +0100 |
| commit | 07d7f7816a94effb9be7a81f208b773846035c0f (patch) | |
| tree | d8d4fa9d19491b2ba82330c784fd7b31aaef6d52 /src/zenhttp/auth | |
| parent | Improve compute dashboard hash column display (diff) | |
| download | zen-sb/compute-auth.tar.xz zen-sb/compute-auth.zip | |
Validate attachment hashes in compute HTTP handlerssb/compute-auth
- Add ValidateAttachmentHash helper that verifies attachment integrity:
- Check compressed header hash matches the claimed attachment hash
- Stream-decompress payload and hash with BLAKE3 to verify actual content
- Apply validation to both HandleWorkerRequest and IngestPackageAttachments
- Run CheckAttachments unconditionally for action submissions (was previously
skipped for CbPackage payloads), ensuring all referenced hashes exist in
the CidStore regardless of content type
Diffstat (limited to 'src/zenhttp/auth')
0 files changed, 0 insertions, 0 deletions