[preprocessor/webhook] verify wacz file hash vs browsertrix webhook e…

…vent
likecoin · Jun 18, 2024 · cba5e97 · cba5e97
1 parent 9d96819
commit cba5e97
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/webhook/browsertrix.go b/webhook/browsertrix.go
@@ -224,6 +224,18 @@ func handleBrowsertrixEvent(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	if fileAttributes["sha256"] != e.Resources[0].Hash {
+		log.Printf("Hash mismatch: %s != %s", fileAttributes["sha256"], e.Resources[0].Hash)
+		writeJsonResponse(w, http.StatusInternalServerError, map[string]string{"error": "hash mismatch"})
+		return
+	}
+
+	if fileAttributes["file_size"] != e.Resources[0].Size {
+		log.Printf("Size mismatch: %d != %d", fileAttributes["file_size"], e.Resources[0].Size)
+		writeJsonResponse(w, http.StatusInternalServerError, map[string]string{"error": "size mismatch"})
+		return
+	}
+
 	metadataMap, err := wacz.GetVerifiedMetadata(tempFilePath)
 	if err != nil {
 		log.Printf("Failed to get metadata: %s", err.Error())