Fix blob upload verify hash bypass (#87)

* Fix empty string detection + undefined bypass * Delete upload file from R2 after cancel
cloudflare · Jan 3, 2025 · d41961c · d41961c
1 parent 79ae725
commit d41961c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/registry/r2.ts b/src/registry/r2.ts
@@ -120,7 +120,7 @@ export async function getUploadState(
     throw new InternalError();
   }
 
-  if (!verifyHash && stateStrHash !== verifyHash) {
+  if (verifyHash !== undefined && stateStrHash !== verifyHash) {
     return new RangeError(stateStrHash, stateObject);
   }
 
@@ -719,6 +719,7 @@ export class R2Registry implements Registry {
 
     const upload = this.env.REGISTRY.resumeMultipartUpload(state.registryUploadId, state.uploadId);
     await upload.abort();
+    await this.env.REGISTRY.delete(getRegistryUploadsPath(state));
     return true;
   }