allow disabling strict sha256 validation with some broken clients (#13383)

with some broken clients allow non-strict validation
of sha256 when ContentLength > 0, it has been found in
the wild some applications that need this behavior. This
shall be only allowed if `--no-compat` is used.
This commit is contained in:
Harshavardhana
2021-10-08 12:40:34 -07:00
committed by GitHub
parent 0c48b1d993
commit 60f961dfe8
4 changed files with 30 additions and 5 deletions

View File

@@ -587,6 +587,10 @@ func serverMain(ctx *cli.Context) {
logStartupMessage(color.RedBold(msg))
}
if !globalCLIContext.StrictS3Compat {
logStartupMessage(color.RedBold("WARNING: Strict AWS S3 compatible incoming PUT, POST content payload validation is turned off, caution is advised do not use in production"))
}
if globalBrowserEnabled {
globalConsoleSrv, err = initConsoleServer()
if err != nil {