archive/nextcloud_server
0
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2025-02-21 15:46:52 +00:00
Code Issues Projects Releases Wiki Activity
nextcloud_server/tests/data/testapp.0.8.tar.gz
Lukas Reschke 7cb0df28e2
Prevent downgrade attacks for apps 
We should verify the app versions when installing a new update, otherwise this could result in downgrade attacks when an attacker just copies the old signature.

Plus it prevents the case that in case of a bug in the appstore actually an older version gets installed.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2016-11-11 18:53:26 +01:00

532 B
Raw Permalink History

View raw