nextcloud / files_antivirus

👾 Antivirus app for Nextcloud Files
https://apps.nextcloud.com/apps/files_antivirus
GNU Affero General Public License v3.0
81 stars 33 forks source link

Files scanned and modified by ICAP server are not being uploaded to NC #271

Open scottedstorn opened 1 year ago

scottedstorn commented 1 year ago

Steps to reproduce

  1. Configure files_antivirus with clamav/ICAP option reqmod or respmod
  2. Upload a file

Expected behaviour

According to rfc3507, ICAP client should take the data stream from the icap server output.

In case the ICAP server is doing modification to the original file like "content disarm reconstruction" or conversion to different type of file like docx to pdf, file_antivirus addon has to write back the modified file. Please refferer to: https://datatracker.ietf.org/doc/html/rfc3507

There are multiple threat extraction solution like Opswat or checkpoint sandblast that can run as icap server and can scan and sanitize or disarm files.

Actual behaviour

File that is uploaded to Nextcloud after beein scanned and modified by icap server is not the "disarmed file"

Server configuration

Not Relevant

files_antivirus version 5.0.0