See this article about zip bombs on hackernews http://news.ycombinator.com/item?id=4 ...
I think, if users upload a zip to the server, the server silly to understand the pressure, it would not be a crash
After the user uploads the zip file, how should be detected before the decompression to prevent a repetition of the tragedy?
It's best to use Python, PHP as an example, and I think the Web language should have this kind of risk.
Reply content:
See this article about zip bombs on hackernews http://news.ycombinator.com/item?id=4 ...
I think, if users upload a zip to the server, the server silly to understand the pressure, it would not be a crash
After the user uploads the zip file, how should be detected before the decompression to prevent a repetition of the tragedy?
It's best to use Python, PHP as an example, and I think the Web language should have this kind of risk.
The WEB server generally does not automatically unzip the zip bar, and the mail server Virus Inspection Unit will generally automatically extract all kinds of compressed files, such as Amavisd-new, which is the case in that article.