Harden ZIP safety checks (total-size cap, zero-division guard) and extension path matching.
Harden ZIP safety checks (total-size cap, zero-division guard) and extension path matching.: a task in bird-critic-1.5-full-300 (Harbor dataset). Superset's ZIP safety validation function check is safe zip (in superset/utils/core.py ) currently enforces only per-file size ( ZIPPED FILE MAX SIZE )…
The task
Superset's ZIP safety validation function `check_is_safe_zip` (in `superset/utils/core.py`) currently enforces only per-file size (`ZIPPED_FILE_MAX_SIZE`) and a per-archive compression ratio (`ZIP_FILE_MAX_COMPRESS_RATIO`). It does not bound the **total** decompressed size, so an archive containing many…
Part of kochsnow/bird-critic-1.5-full-300.