Skip to content

fix: Ipfs-Uri gateway header (IPIP-548) - #11437

Open
lidel wants to merge 2 commits into
masterfrom
ipip-548-ipfs-uri
Open

fix: Ipfs-Uri gateway header (IPIP-548)#11437
lidel wants to merge 2 commits into
masterfrom
ipip-548-ipfs-uri

Conversation

@lidel

@lidel lidel commented Aug 23, 2026

Copy link
Copy Markdown
Member

Problem

LegacyX-Ipfs-Path cannot carry every UnixFS file name: bytes outside visible ASCII are invalid in HTTP field values1, so names like łódź.txt reached clients garbled. ipfs/specs#548 deprecates it in favor of Ipfs-Uri, a percent-encoded ipfs:// / ipns:// address that survives any name.

Fix

Draft until boxo cuts a release with ipfs/boxo#1209; the temporary go.mod pin then becomes a normal version bump.

Footnotes

  1. RFC 9110, section 5.5: field values are limited to HTAB, SP, and visible ASCII.

lidel added 2 commits August 24, 2026 01:28
Bump boxo to the IPIP-548 implementation (ipfs/boxo#1209): gateway
responses carry a canonical percent-encoded Ipfs-Uri header and stop
sending the deprecated X-Ipfs-Path, which cannot represent every
UnixFS file name.

- sharness: CORS expects Ipfs-Uri exposed, X-Ipfs-Path gone
- gateway-conformance CI pinned to the IPIP-548 test suite
  (ipfs/gateway-conformance#301) until a release ships
- reverse-proxy doc and v0.44 changelog updated

Refs ipfs/specs#548
Expose boxo's opt-in for the legacy X-Ipfs-Path response header as a
kubo config flag, default off. Unsafe: the legacy value cannot
represent every UnixFS file name, so it must only be used to
facilitate migration to Ipfs-Uri, and even when enabled the header
is still skipped when the value would include non-ASCII byte
sequences.

Refs ipfs/specs#548
@lidel lidel mentioned this pull request Aug 23, 2026
57 tasks
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​ipfs/​boxo@​v0.42.2 ⏵ v0.42.3-0.20260823232042-919701685bd374 +1100100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant