Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Filename suffix gets discarded if an identical file already exists #45

Open
JonasOlson opened this issue Feb 29, 2016 · 3 comments
Open

Comments

@JonasOlson
Copy link

Suppose you upload a file called audio.jpg, and get the URL .../zksebc.jpg back. Then you realise that it had the wrong filename suffix, so you rename it to audio.ogg and upload that one. The URL you then get back will again be .../zksebc.jpg, so you still have the wrong filename suffix.

@avail
Copy link

avail commented Feb 29, 2016

why'd you upload a song file as a jpeg in the first place, though?

@AlleSoke1
Copy link

That's not a bug , it's a feature. Why would you want to have 2 duplicate files in your storage?
Also if you want to discover files on host , just create a 10liner python script to try all combinations from a-z and within 26^6 requests you have all the hosting mapped.

@JonasOlson
Copy link
Author

why'd you upload a song file as a jpeg in the first place, though?

Why would you want to have 2 duplicate files in your storage?

In my case, I accidentally put the wrong video container file suffix on a video file, uploaded it, realised my mistake, and uploaded the same content with a new filename.

I can also imagine situations where two files of different types can have the same content, for example one plain text file and Markdown file. An empty file is probably valid in many file formats.

Finally, it might be a way to interfere with other users. For example, if an evildoer knows or can guess that a certain file soon will be uploaded, he could upload an identical file under a different name and thus ruin the experience for the legitimate users.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants