Emelia/Emi on Nostr: One of the crawler landmines I have somewhere in my stack is a zip bomb, but that's ...

One of the crawler landmines I have somewhere in my stack is a zip bomb, but that's reserved for the bots trying to hit wp-admin/ on a non-wordpress site...

Just make sure your server is set to always return it *without decompressing it* even if the client claims to not support decompression; that was a thing the "AI" crawlers did as an attempt to counter the bomb. (So any clients that "don't support" compression just get the tiny gzip stream, even if it doesn't actually blow up in their face)