Skip to content

Force-derive thumbnail filename via timestamp#53

Merged
arrdalan merged 2 commits intomainfrom
fix-thumbnail-traversal
Apr 19, 2026
Merged

Force-derive thumbnail filename via timestamp#53
arrdalan merged 2 commits intomainfrom
fix-thumbnail-traversal

Conversation

@jkaczman
Copy link
Copy Markdown
Collaborator

This stops trusting sender-controlled thumbnail filenames. Instead, the app derives thumbnail filenames from the timestamp using a fixed format.

@jkaczman jkaczman requested a review from arrdalan April 10, 2026 20:31
Copy link
Copy Markdown
Collaborator

@arrdalan arrdalan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems like we won't need the filename field in ThumbnailMetaInfo anymore. If this is the case, please go ahead and remove it.

@jkaczman jkaczman changed the title fix(client_lib): force-derive thumbnail filename via timestamp Force-derive thumbnail filename via timestamp Apr 14, 2026
@jkaczman
Copy link
Copy Markdown
Collaborator Author

It seems like we won't need the filename field in ThumbnailMetaInfo anymore. If this is the case, please go ahead and remove it.

Thanks! Fixed. Please let me know if you see anything else. if it looks good, please squash this one.

@jkaczman jkaczman requested a review from arrdalan April 18, 2026 23:37
Copy link
Copy Markdown
Collaborator

@arrdalan arrdalan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested this with RPi and Android. Thumbnails now don't show up in the app at all. Most likely, there's something wrong with the thumbnail filenames. It needs more debugging.

@arrdalan
Copy link
Copy Markdown
Collaborator

I just realized that I didn't update the app_native code in the app, which this PR seems to modify. I'll test again shortly.

@arrdalan arrdalan self-requested a review April 19, 2026 01:51
Copy link
Copy Markdown
Collaborator

@arrdalan arrdalan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Successfully tested.

@arrdalan arrdalan merged commit 405f550 into main Apr 19, 2026
2 checks passed
@jkaczman jkaczman deleted the fix-thumbnail-traversal branch April 19, 2026 23:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants