mirror of
https://github.com/chatmail/core.git
synced 2026-10-18 10:53:07 +03:00
This is simpler and can count as hardening because we don't call async_zip parser anymore just to check if received file is a webxdc. This way if ZIP parser is buggy and e.g. panics, or gets into infinite loop, or is accidentally quadratic, or allocates a lot of memory, this cannot be triggered by just sending a file.