Skip to content

Disable the PIL decompression bomb DOS attack check

Harshil Patel requested to merge HarshilPatel007/extensions:fixInbox6522 into master

What does the merge request do?

  • fix the inbox#6522 (closed)
  • basically the PIL checks the pixels size to prevent the "ZIP Bomb" like attacks
  • But, we don't know how big things users will create with the inkscape. If we leave checks as it is, then users can't be able to export/import the big files
  • So, I've disabled the checks

Checklist

  • Add unit tests (if applicable)
  • Changes to inkex/ are well documented
  • Clean merge request history
Edited by Harshil Patel

Merge request reports