Document |
Testing archives for actual expanded size and actual compression ratio can help in detecting malicious zip-bomb archives (see property MaxArchiveCompressionRatio). Malicious archives can have tampered with item header metadata such as item expansion size, thereby hiding the true item expanded size. If this property is set to false then the internal logic that helps detect malicious archives has to rely of archive item expansion size header information. Some archive formats do not have item expansion size header information, and furthermore, malicious archives can have tampered with item header information that masks true expansion size.
If is strongly recommended to always set this property to true (the default property value).
Default property value: true