https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43638
--- Comment #12 from Martin Renvoize (ashimema) <[email protected]> --- Created attachment 209018 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=209018&action=edit Bug 43638: Add MAX_ZIP_MEMBERS cap to Koha::Patron::Image::Import This commit adds a safety cap to prevent extraction and processing of zip archives with more than 1000 non-directory members, bounding worst-case extraction work from oversized or malicious zip files. The cap is enforced in import_batch before any extraction occurs, and returns a TOO_MANY_MEMBERS error when exceeded. To test: 1. Run $ prove t/db_dependent/Koha/Patron/Image/Import.t => It passes, including the test of the cap on the number of members of a zip archive Co-Authored-By: Claude Haiku 4.5 <[email protected]> -- You are receiving this mail because: You are watching all bug changes. _______________________________________________ Koha-bugs mailing list -- [email protected] To unsubscribe send an email to [email protected] website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
