http://lpoaj774fddyczsopqwpecbqanp243yjaz36bukhzqgafkmwlxrhhuqd.onion/posts/2024/07/zipbombing.html
match any header that indicates compression support route @bot { handle @compression { rewrite * /bomb file_server { root /srv/www/bombs precompressed br zstd gzip # Preference based on ascending compressed size + descending decompressed size, do note we dunno'f there's clients that support zstd but not brotli, in any case't prolly doesn't hurt having't here } header { -ETag # No point in clients caching this -Server Content-Type text/hmtl X-Content-Type-Options nosniff } } redir...