You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Directory SyncArea: what it touches
ImprovementsKind: in v2.1.248,
ImprovementsSection of the release
What
Directory sync now verifies that fetched content matches the declared sha256 and length, and checks the declared hash shape and size bounds first. Content described in a transport format this side cannot read is refused and logged rather than attempted.
Evidence
dir-sync: refused a container object named by a carrier this side cannot read
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
