From a92c033a5e68c451b3b34a0c6e53ded2ea6a4bdd Mon Sep 17 00:00:00 2001
From: Bernhard Herzog <bernhard.herzog@intevation.de>
Date: Tue, 25 Apr 2023 18:28:07 +0200
Subject: [PATCH] Check that filename matches ID in csaf_downloader

---
 cmd/csaf_downloader/downloader.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/cmd/csaf_downloader/downloader.go b/cmd/csaf_downloader/downloader.go
index 00c4a19..4441805 100644
--- a/cmd/csaf_downloader/downloader.go
+++ b/cmd/csaf_downloader/downloader.go
@@ -368,6 +368,11 @@ func (d *downloader) downloadFiles(label csaf.TLPLabel, files []csaf.AdvisoryFil
 			continue
 		}
 
+		if err := util.IDMatchesFilename(d.eval, doc, filename); err != nil {
+			log.Printf("Ignoring %s: %s.\n", file.URL(), err)
+			continue
+		}
+
 		// Validate against remote validator
 		if d.validator != nil {
 			rvr, err := d.validator.Validate(doc)