fix: strengthen input validation for METS‑GBS processing (#3336)
* fix: prevent XXE and decompression bomb in METS-GBS processing Signed-off-by: Cesar Berrospi Ramis <ceb@zurich.ibm.com> * refactor: enforce resource limits for METS-GBS tar extraction Signed-off-by: Cesar Berrospi Ramis <ceb@zurich.ibm.com> --------- Signed-off-by: Cesar Berrospi Ramis <ceb@zurich.ibm.com>
C
Cesar Berrospi Ramis committed
c1dbac22c7a0d55f22d82af5262c9e60df915083
Parent: 5e161ac
Committed by GitHub <noreply@github.com>
on 4/23/2026, 8:17:39 AM