mirror of
https://github.com/compiler-explorer/compiler-explorer.git
synced 2026-07-21 23:26:56 -04:00
51317dc13f
Fixes #8817. Kept deliberately simple per discussion — the conan server is CE's own infrastructure, so these are hygiene bounds, not attack mitigations: - A generous fixed 2GiB cap on the total declared size of extracted files (tar-stream enforces entry bodies match their headers, so summing `header.size` bounds bytes written). Real packages are tens to a few hundred MiB; hitting this means a packaging error or a corrupt/bombed archive, and the extraction rejects cleanly through the existing error path. - The package URL conan returns must be http(s). No redirect restrictions (conan may legitimately hand out redirecting/presigned URLs), no config plumbing. Both paths tested (cap exercised by lowering the limit on the instance under test; scheme via a `file://` URL). 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: mattgodbolt-molty <mattgodbolt-molty@users.noreply.github.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>