Verify integrity after chunked download

1 files changed, 7 insertions, 0 deletions

diff --git a/activestorage/lib/active_storage/downloader.rb b/activestorage/lib/active_storage/downloader.rb
index 0e7039e104..5953fd08fb 100644
--- a/activestorage/lib/active_storage/downloader.rb
+++ b/activestorage/lib/active_storage/downloader.rb
@@ -10,6 +10,7 @@ module ActiveStorage
     def download_blob_to_tempfile
       open_tempfile do |file|
         download_blob_to file
+        verify_integrity_of file
         yield file
       end
     end
@@ -34,6 +35,12 @@ module ActiveStorage
         file.rewind
       end
 
+      def verify_integrity_of(file)
+        unless Digest::MD5.file(file).base64digest == checksum
+          raise ActiveStorage::IntegrityError
+        end
+      end
+
       def tempfile_extension_with_delimiter
         blob.filename.extension_with_delimiter
       end