**Severity:** MEDIUM (from external code review) Client reassembles Block2 payloads without comparing ETags across blocks. RFC 7959 says client MUST compare ETags if available. **Fix:** Track ETag from first block, compare on subsequent blocks, abort if mismatch.
Activity
fix: Block2 ETag consistency check (#86)
fix: Block2 ETag consistency check (#86) (#91)
cvik commentedon Mar 21, 2026
Fixed in PR #91 — Block2 ETag consistency check.