Skip to content

docs: mention more zip bomb precautions#21143

Closed
bagder wants to merge 1 commit intomasterfrom
bagder/more-zip-bomb
Closed

docs: mention more zip bomb precautions#21143
bagder wants to merge 1 commit intomasterfrom
bagder/more-zip-bomb

Conversation

@bagder
Copy link
Copy Markdown
Member

@bagder bagder commented Mar 28, 2026

No description provided.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates curl/libcurl documentation to better highlight decompression “zip bomb” risks when enabling automatic content decoding.

Changes:

  • Improves formatting/consistency of HTTP header references in CURLOPT_ACCEPT_ENCODING docs.
  • Expands WARNING sections to suggest additional precautions when enabling decompression.
  • Adds similar precautionary guidance to the --compressed command line option docs.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
docs/libcurl/opts/CURLOPT_ACCEPT_ENCODING.md Re-formats header names and expands the decompression warning with additional suggested precautions.
docs/cmdline-opts/compressed.md Expands the decompression warning with additional suggested precautions and a --max-filesize mention.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@bagder bagder closed this in 78cf156 Mar 29, 2026
@bagder bagder deleted the bagder/more-zip-bomb branch March 29, 2026 21:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

2 participants