FUN WITH GZIP BOMBS AND EMAIL CLIENTS

Summary from the TLDR Web Dev newsletter

Email clients are vulnerable to Gzip bombs, which are small compressed files that expand to a massive size when decompressed. This dev created a 10MB Gzip file that expands to 10GB and tested how various email clients handle it when embedded as an image in an email. Some clients like Firefox, Thunderbird, and Gmail's proxies bailed out early, while others like Fastmail webmail's proxies downloaded a partial amount before giving up. iOS Mail crashed.