https://nalar.dev/tags/availability/ Recent content in Availability on Nalar Hugo en-us Wed, 09 Sep 2026 00:00:00 +0700 https://nalar.dev/limit-decompression-before-processing-untrusted-archives/ Wed, 09 Sep 2026 00:00:00 +0700 https://nalar.dev/limit-decompression-before-processing-untrusted-archives/ <p>An upload limit can look like a complete resource limit until the application accepts compressed input. A small archive may expand into far more data than its uploaded size suggests, contain an excessive number of entries, or require enough decompression work to tie up workers. If the service trusts the compressed size, an attacker may be able to exhaust disk, memory, CPU time, or processing capacity without sending a large request.</p>