JRE provisioning: Harden against Zip bomb attack

The JRE provisioning is vulnerable against zip bomb attacks in the ZipUnpacker and the TarGzUnpacker implementations.
For details see the security hotspot for rule [S5042](https://sonarcloud.io/organizations/sonarsource/rules?open=csharpsquid%3AS5042&rule_key=csharpsquid%3AS5042) in [ZipUnpacker's use of zipArchive.ExtractToDirectory](https://sonarcloud.io/project/security_hotspots?id=sonarscanner-msbuild&pullRequest=2018&hotspots=AZB9sOemJ2eIkslaCC3w).

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

JRE provisioning: Harden against Zip bomb attack #2039

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development