Skip to content

docs: mention more zip bomb precautions - #21143

Closed
bagder wants to merge 1 commit into
masterfrom
bagder/more-zip-bomb
Closed

bagder wants to merge 1 commit into
masterfrom
bagder/more-zip-bomb

Conversation

@bagder

@bagder bagder commented Mar 28, 2026

Copy link
Copy Markdown
Member

No description provided.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates curl/libcurl documentation to better highlight decompression “zip bomb” risks when enabling automatic content decoding.

Changes:

  • Improves formatting/consistency of HTTP header references in CURLOPT_ACCEPT_ENCODING docs.
  • Expands WARNING sections to suggest additional precautions when enabling decompression.
  • Adds similar precautionary guidance to the --compressed command line option docs.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
docs/libcurl/opts/CURLOPT_ACCEPT_ENCODING.md Re-formats header names and expands the decompression warning with additional suggested precautions.
docs/cmdline-opts/compressed.md Expands the decompression warning with additional suggested precautions and a --max-filesize mention.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread docs/libcurl/opts/CURLOPT_ACCEPT_ENCODING.md
Comment thread docs/libcurl/opts/CURLOPT_ACCEPT_ENCODING.md
Comment thread docs/cmdline-opts/compressed.md
@bagder bagder closed this in 78cf156 Mar 29, 2026
@bagder
bagder deleted the bagder/more-zip-bomb branch March 29, 2026 21:42
outcast36 pushed a commit to greearb/curl that referenced this pull request Jun 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

2 participants