Martijn Hoekstra wrote:
> Should we also be exploring any possibly malicious archives inside
> archives recursively, or is just making sure the archive itself is
> good is good enough?

I think that we should block such files.
Also note that we can't recursively analyse everything since that would
allow to DoS us.


_______________________________________________
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Reply via email to