[php:core,VD] disallow extract of uncompressed size larger than option "maxArcFilesSize"

[nao-pon]

Then, change the default value of "maxArcFilesSize" from "0" (no limit) to "2G" (2Gbytes). This is also a defense against Zip Bomb.

$opts = array(
    'roots'  => array(
        array(
            'driver' => 'LocalFileSystem',
            'path'   => '/path/to/files/',
            'URL'    => 'http://localhost/to/files/',
            'maxArcFilesSize' => '500M', // Extract allow max 500MB
        )
    )
);

// run elFinder
$connector = new elFinderConnector(new elFinder($opts));
$connector->run();