Re:Defending a website with Zip bombs
by vgb2k11 on Thursday July 06, 2017 @11:35AM
(#14711170)
Could the head be spoofed in such a way that the header says 1MB, or might the clients/bots be typically strict on ensuring header values are valid? I think your raised issue is important though, and any serious client/bot should be ignoring files with 1KB -> 1GB decompression ratios.
[ Parent
| on HN ]
There are no comments on this comment yet.