Skip to content

Missing size validation in Package.Open for [Content_Types].xml #132394

Description

@rzikm

Package.Open in ReadWrite mode unconditionally materializes [Content_Types].xml file in a MemoryStream. Since this is effectively metadata, we should limit the extracted size similarly as in #127602

Activity

  1. dotnet-policy-service commented on Aug 17, 2026

    @dotnet-policy-service
    Contributor

    Tagging subscribers to this area: @karelz, @dotnet/area-system-io-compression
    See info in area-owners.md if you want to be subscribed.

  2. added theissue type on Aug 17, 2026
  3. removed
    untriagedNew issue has not been triaged by the area owner
    on Aug 20, 2026
  4. added a commit that references this issue on Sep 10, 2026
    008014d
  5. locked and limited conversation to collaborators on Oct 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions