[GH-ISSUE #430] There is a serious issue with obtaining the hash method with "?hash" #233

Closed
opened 2026-04-08 16:51:21 +03:00 by zhus · 1 comment
Owner

Originally created by @jincandev on GitHub (Aug 13, 2024).
Original GitHub issue: https://github.com/sigoden/dufs/issues/430

Problem

If hash request parameters are used to obtain resource hashes, it will violate the principles of the HTTP protocol. When parsing resource collections such as m3u8, if the internal sub resources have already been configured with hash request parameters by default, the entire m3u8 resource cannot be fully parsed. For example, if there is a "data. ts?hash=xxxxxx" in the. m3u8 file.
it is recommended to use "xxx/file.exe:hash" to obtain the file hashes

Configuration

Log

Environment:

  • Dufs version:
  • Browser/Webdav info:
  • OS info:
  • Proxy server: e.g. nginx, cloudflare
Originally created by @jincandev on GitHub (Aug 13, 2024). Original GitHub issue: https://github.com/sigoden/dufs/issues/430 **Problem** If hash request parameters are used to obtain resource hashes, it will violate the principles of the HTTP protocol. When parsing resource collections such as m3u8, if the internal sub resources have already been configured with hash request parameters by default, the entire m3u8 resource cannot be fully parsed. For example, if there is a "data. ts?hash=xxxxxx" in the. m3u8 file. it is recommended to use "xxx/file.exe:hash" to obtain the file hashes **Configuration** <!-- The dufs command-line arguments or configuration --> <!-- If the problems are related to auth/perm, please conceal only the user:pass, but do not hide the entire `auth` configuration. --> **Log** <!-- The dufs log is crucial for locating the problem, so please do not omit it. --> **Environment:** - Dufs version: - Browser/Webdav info: - OS info: - Proxy server: e.g. nginx, cloudflare
zhus closed this issue 2026-04-08 16:51:21 +03:00
Author
Owner

@sigoden commented on GitHub (Aug 14, 2024):

Any design requires a balance between convenience and safety. In the dufs service, avoiding the use of ?hash should not be difficult.

<!-- gh-comment-id:2287496156 --> @sigoden commented on GitHub (Aug 14, 2024): Any design requires a balance between convenience and safety. In the dufs service, avoiding the use of `?hash` should not be difficult.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sigoden/dufs#233