2 ms·
If I recall correctly, HTTP clients do not need to care about Content-Encoding at all and can choose to just not do anything with your ZIP bomb. To really hit t
by koito17 3y ago
If I recall correctly, HTTP clients do not need to care about Content-Encoding at all and can choose to just not do anything with your ZIP bomb. To really hit them, you will want to do this at the Transfer-Encoding level.
- deleted 3y ago[deleted]
- lifthrasiir 3y agoIf the client wants to parse HTML and do something accordingly, it at least has to honor some popular Content-Encoding.