diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2016-11-11 18:53:26 +0100 |
|---|---|---|
| committer | Lukas Reschke <lukas@statuscode.ch> | 2016-11-11 18:53:26 +0100 |
| commit | 7cb0df28e2d99237c92922d9bf2fd203f0f1d8c0 (patch) | |
| tree | 28cd0d4ba40cd24c23cf1b89152825964abf1cf0 /tests/data | |
| parent | d61c8d74bbba9901c453a5f9be9a4ffa6cce4291 (diff) | |
| download | nextcloud-server-7cb0df28e2d99237c92922d9bf2fd203f0f1d8c0.tar.gz nextcloud-server-7cb0df28e2d99237c92922d9bf2fd203f0f1d8c0.zip | |
Prevent downgrade attacks for apps
We should verify the app versions when installing a new update, otherwise this could result in downgrade attacks when an attacker just copies the old signature.
Plus it prevents the case that in case of a bug in the appstore actually an older version gets installed.
Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
Diffstat (limited to 'tests/data')
| -rw-r--r-- | tests/data/testapp.0.8.tar.gz | bin | 0 -> 532 bytes |
1 files changed, 0 insertions, 0 deletions
diff --git a/tests/data/testapp.0.8.tar.gz b/tests/data/testapp.0.8.tar.gz Binary files differnew file mode 100644 index 00000000000..ec283b5773f --- /dev/null +++ b/tests/data/testapp.0.8.tar.gz |