Release verification and API useage docs
76 views
Skip to first unread message
ink trap
Mar 31, 2022, 3:53:58 AM3/31/22
to ChromeDriver Users
Hi everyone! :)
Is it possible to verify chromedriver and chromium builds by sha256 or sha512 or a similarly secure checksum? Version selection (https://chromedriver.chromium.org/downloads/version-selection) doesn't mention this and also the chromedriver release I want to use (https://chromedriver.storage.googleapis.com/index.html?path=99.0.4844.51%2F) has no shasum nor gpg signatures. Am I overlooking something?
Secondly, the googleapi seems to allow various other methods and an md5 checksum ( which is insecure, I know) but I can't even seem to query that for a chromium build? Where is this documented?
I know I can query a release:
I can get this overview: https://www.googleapis.com/storage/v1/b/chromium-browser-snapshots/o
I can query this to get the latest change:
https://www.googleapis.com/download/storage/v1/b/chromium-browser-snapshots/o/Linux_x64%2FLAST_CHANGE?alt=media
But what else can I query? Google has some docs about their googleapi-useage but I didn't see how their docs for the storage API applies to this.
P.S.: Drive-by-downloads are THE main attack vector for e.g. intrusive governments to bug people.
Is it possible to verify chromedriver and chromium builds by sha256 or sha512 or a similarly secure checksum? Version selection (https://chromedriver.chromium.org/downloads/version-selection) doesn't mention this and also the chromedriver release I want to use (https://chromedriver.storage.googleapis.com/index.html?path=99.0.4844.51%2F) has no shasum nor gpg signatures. Am I overlooking something?
Secondly, the googleapi seems to allow various other methods and an md5 checksum ( which is insecure, I know) but I can't even seem to query that for a chromium build? Where is this documented?
I know I can query a release:
I can get this overview: https://www.googleapis.com/storage/v1/b/chromium-browser-snapshots/o
I can query this to get the latest change:
https://www.googleapis.com/download/storage/v1/b/chromium-browser-snapshots/o/Linux_x64%2FLAST_CHANGE?alt=media
and download some REVISION by calling: https://www.googleapis.com/download/storage/v1/b/chromium-browser-snapshots/o/Linux_x64%2F$REVISION%2Fchrome-linux.zip?alt=media
But what else can I query? Google has some docs about their googleapi-useage but I didn't see how their docs for the storage API applies to this.
P.S.: Drive-by-downloads are THE main attack vector for e.g. intrusive governments to bug people.
Space Soft System
May 23, 2022, 1:58:56 AM5/23/22
to ink trap, ChromeDriver Users
I use Chrome Drives for Whatsapp API Services for Software Development. My website is api4ws.com
i have a issue there , how i create button in whatsapp chat , using VB 2010 JavaScript
any one help me
--
You received this message because you are subscribed to the Google Groups "ChromeDriver Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromedriver-us...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/chromedriver-users/e048eb9b-6cc6-4206-a0bb-5daf835c24den%40googlegroups.com.
===============================================
Space Soft System
Software Development Work
Space Soft System
Software Development Work
Software Sales & Service
Cell 73546-73546
Reply all
Reply to author
Forward
0 new messages