pingvin-share icon indicating copy to clipboard operation
pingvin-share copied to clipboard

🐛 Bug Report: ClamAV doesn't trigger in combination with a regular file

Open hugosxm opened this issue 1 year ago • 4 comments

👟 Reproduction steps

Hi !

If you upload a malicious file AND a regular file, clamav does not 'trigger'

Works as expected with ONE file at a time, failed with two or more :(

Also, if you upload a malicious file, it should not create the share at all, instead of creating it, giving you the link, and prompting after that the share got deleted.

But I see that french and oauth login got added, so keep the good work ! I quite like this product !

👍 Expected behavior

It should say the same warning with one file : you share got deleted cause file xxx is malicious !

👎 Actual Behavior

It does nothing and let you download the crap file

🌐 Browser

Brave

hugosxm avatar Oct 26 '23 14:10 hugosxm

The library the we use to communicate with ClamAV seems broken. There isn't really an alternative to this library. I currently don't really have the time to create a custom implementation but maybe someone wants to create a PR or I might have time in the future.

stonith404 avatar Nov 17 '23 23:11 stonith404

This issue is stale because it has been open for 30 days with no activity.

github-actions[bot] avatar Dec 18 '23 00:12 github-actions[bot]

This issue was closed because it has been inactive for 14 days since being marked as stale.

github-actions[bot] avatar Jan 01 '24 00:01 github-actions[bot]

this seems not to be fixed. Also I appreciate if there would be an environment variable configuration to run this on socket if it is installed bare metal.

manuelkamp avatar Jan 04 '24 13:01 manuelkamp

This should be fixed now.

stonith404 avatar Sep 18 '24 21:09 stonith404