On: Defending a website with Zip bombs

[fmavituna]

We are developing a web application security scanner [1] and we indeed use max length setting and also detect binary responses, just tested this and as expected it worked fine.

I'm actually surprised that many other scanners failed to do this.

[1] https://www.netsparker.com