From 48c16de8bf74df0fa94a30d29e2e7e3446d48433 Mon Sep 17 00:00:00 2001
From: xuri <xuri.me@gmail.com>
Date: Sun, 15 Aug 2021 00:06:40 +0800
Subject: Improve security and simplify code

- Make variable name more semantic
- Reduce cyclomatic complexities for the formula calculate function
- Support specified unzip size limit on open file options, avoid zip bombs vulnerability attack
- Typo fix for documentation and error message
---
 xmlDrawing.go | 1 +
 1 file changed, 1 insertion(+)

(limited to 'xmlDrawing.go')

diff --git a/xmlDrawing.go b/xmlDrawing.go
index 4e35fcf..b49ae9d 100644
--- a/xmlDrawing.go
+++ b/xmlDrawing.go
@@ -94,6 +94,7 @@ const (
 
 // Excel specifications and limits
 const (
+	UnzipSizeLimit       = 1000 << 24
 	StreamChunkSize      = 1 << 24
 	MaxFontFamilyLength  = 31
 	MaxFontSize          = 409
-- 
cgit v1.2.1