Hide Download - optimize or remove
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 36.9k
- Forks
- 5.2k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 713
Description
Nextcloud has got the feature to "Hide download". But the user can use the download with add /download.
Link with hide download:
https://cloud.server.tld/s/zYFmbgKRJyNZ6YC
Link for download:
https://cloud.server.tld/s/zYFmbgKRJyNZ6YC/download
I think there are two possibilities
a.) Distinguish at “download” (increase security)
b.) remove hide download (honest dealings with the users, there is currently no security increase with hide download)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the two shared-link URLs described in the issue and compare their behavior when “Hide download” is enabled. Before implementation, resolve whether the intended outcome is stronger download restriction or removal of the option; done should include a decided behavior and corresponding verification.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100