ipfs/kubo

gateway: feature request: ability to disable directory listings

Open

#9,645 建立於 2023年2月10日

在 GitHub 查看
 (6 留言) (0 反應) (1 負責人)Go (13,906 star) (2,725 fork)batch import
P3effort/hoursexp/novicehelp wantedkind/featuretopic/gateway

描述

tldr; I would like one more option to support blocking listing directory contents

Checklist

  • My issue is specific & actionable.
  • I am not suggesting a protocol enhancement.
  • I have searched on the issue tracker for my issue.

Description

https://ipfs.io/ipfs/Qmd148AbtEZKR4KCUZiNGDURTxCwSa13adLKkjdmyWPMt9 【let him redirect】 https://ipfs.io/ipfs/Qmd148AbtEZKR4KCUZiNGDURTxCwSa13adLKkjdmyWPMt9/VCG211be3c9c31.jpg 【OK】 https://ipfs.io/ipfs/QmcBpxUZMbD5iwNA8w2dj8QBWvTdAXwNDHbZ74ffqGtNHh 　【OK】

Because certain scenarios have relatively strict security requirements, directory traversal caused by direct get access is considered a security issue. Therefore, it is recommended to directly redirect to the specified page when accessing indirect data resources, instead of directly using the form of directory traversal, or Add a parameter directly in the configuration file to achieve.

貢獻者指南

技術棧
go
領域
backendsecurity
議題類型
feature
難度面向新貢獻者的預計實作難度，1 表示很小改動，5 表示專家級工作。
3
預計時間有經驗貢獻者完成調查、實作、測試並準備 pull request 的粗略時間範圍。
half day
活動狀態議題目前的可參與程度：新鮮、活躍、陳舊、阻塞或等待維護者輸入。
blocked
清晰度議題是否清楚說明預期改動、驗收標準和下一步。
mostly clear
前置要求
Go programmingIPFS gateway concepts
新手友善度1-100 的估計分數，表示該議題對首次貢獻者的友善程度。
35
研究方向
First, review the gateway configuration code in the kubo repository (e.g., config/defaults.go, config/gateway.go) to understand how options are added. Then, examine the gateway handler that serves directory listings (likely in the 'gateway' or 'core' packages). Look for existing comments or linked pull requests that discuss disabling directory listings. Finally, check the assignee's activity on the issue to determine if they have started work or have specifications.