[DriverDaily]

Plenty of room for a recursive function with no base case

[grepfru_it]

You're not getting very far on 2k bytes. A 10k file expands to 10MB and will likely timeout if the author's webhost configured proper limits

[acidx]

Files are not decompressed in the server: it sends the unmodified deflate stream back to the user.

[pmarreck]

See my comment about this upstream, here: https://news.ycombinator.com/item?id=37410473

[DriverDaily]

Wouldn't infinitely spawning web workers do the same thing as a zip bomb?

```

<script>

   const workerBlob = new Blob(['

        while (true) { console.log("this is a worker that will never stop") }

    '], { type: 'application/javascript' })

   const workerBlobURL = URL.createObjectURL(workerBlob)

   while (true) { new Worker(workerBlobURL) }

</script>

```

[gitgud]

The zip file is decompressed on the server, whereas that HTML/JS will be executed on the client

[DriverDaily]

I see, I misunderstood