[TIKA-2642] Add possibility for SecureContentHandler settings

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: parser
• Assignee: Unassigned
• Reporter: Nikita Sheremet
• Created: 08/May/18 10:48
• Updated: 08/May/18 10:48

Description

org.apache.tika.sax.SecureContentHandler is used in org.apache.tika.parser.AutoDetectParser to protect from zip bombs. But all of settings like:

1. threshold
2. ratio
3. maxDepth
4. maxPackageEntryDepth
5. ...

Are hardcoded into class fields. And it is impossible to disable or confugure such fields outside of org.apache.tika.parser.AutoDetectParser#parse() method.

 

Could you pleas add abilitty to change these configs (from porperty file for example) and way to disable zip bom detection?