How can I protect myself from a zip bomb?

2020-01-30 03:56发布

I just read about zip bombs, i.e. zip files that contain very large amount of highly compressible data (00000000000000000...).

When opened they fill the server's disk.

How can I detect a zip file is a zip bomb before unzipping it?

UPDATE Can you tell me how is this done in Python or Java?

7条回答
叛逆
2楼-- · 2020-01-30 04:26

Don't allow the upload process to write enough data to fill up the disk, ie solve the problem, not just one possible cause of the problem.

查看更多
登录 后发表回答