worker: clarify maxFileSize purpose

Fixes #237.
quay · Dec 20, 2016 · de1f09e · de1f09e
1 parent 7d0f29b
commit de1f09e
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/worker/worker.go b/worker/worker.go
@@ -30,7 +30,9 @@ const (
 	// Increased each time the engine changes.
 	Version = 3
 
-	// maxFileSize is the maximum size of a single file we should extract.
+	// maxFileSize enforces a maximum size of a single file within a tarball that
+	// will be extracted. This protects against malicious layers that may contain
+	// extremely large package database files.
 	maxFileSize = 200 * 1024 * 1024 // 200 MiB
 )