mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-05 00:29:48 +03:00
Desired Feature: antivirus scan of file uploads #633
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @TBK on GitHub (Apr 10, 2018).
Description:
Uploaded files should be scanned and rejected if tested positive, result logged and user notified of why the file was not accepted.
Inspiration:
https://www.superbrackets.com/article/scan-files-for-viruses-using-laravel-and-clamav
https://github.com/sunspikes/clamav-validator
@lommes commented on GitHub (Jun 28, 2018):
This actually works with minimum changes in BookStack.
Nothing is logged yet.
Systemconfiguration is a bit tricky since clamav runs as own user and has no read access to the uploaded tmp file. I'm sure this will lead to many new issues regarding the interaction of BookStack and clamav.
@TBK commented on GitHub (Sep 20, 2018):
@lommes thanks for working on this request.
From my small amount of research it is possible to stream the file to an networked instance via the clamd protocol (https://blog.clamav.net/2016/06/regarding-use-of-clamav-daemons-tcp.html & https://linux.die.net/man/8/clamd) which would solve the permissions issue.
On the 3th of July sunspikes/clamav-validator got support for steaming -
d52c441089which the underlying lib has supported for quite a while https://github.com/jonjomckay/quahog@ssddanbrown commented on GitHub (Nov 8, 2022):
I'm going to go ahead and close this off since there's been little demand for this since opening.