On #curl's --max-filesize and --compressed. Should we do something about the "compression bomb" risk?
https://curl.se/mail/archive-2026-03/0000.html
--max-filesize