Abdessamad Derraz d274d8a65c fix: guard MD5 lookup against cross-name contamination ...

resolve_local_file step 2 (pure MD5 lookup) now verifies that the
found file's name matches the requested name or is a .variants/
derivative. Prevents serving wrong files when an unrelated file
shares the same MD5 in the index (e.g. spi.zip returned for
a7ports.zip because RetroDECK expected an MD5 we don't have).

2026-03-29 14:15:06 +02:00

62 KiB

Raw Blame History

View Raw