Considering that xlsx can be used as a zip bomb and drive api can convert it into a sheet, I am wondering if there are any checks to prevent a conversion in case of a zip bomb? I have tried checking the docs but did not find any relevant information there. I did not find any such info on Stack overflow either.
1 Answers
The answer is no, Google Drive does not protect you from zip bombs.
Today, I verified that Google Drive will upload and store a zip bomb. Google Drive scans files under 100 MB for known viruses. I am not sure how Google classifies a zip bomb for storage and if the scanner will detect the zip bomb in the future. In the short term, the zip bomb is not flagged in Google Drive.
Google Chrome and Firefox detect zip bombs and prevent their download. Microsoft Edge permitted the download of the zip bomb.
Using the Google Drive integration with Windows Explorer (Windows 10 Professional) permitted the download of a zip bomb stored in Google Drive.
Most antivirus software will quarantine zip bombs during file scans and during downloads.
Therefore, you will need to implement additional strategies to protect systems from zip bombs.
Related