title: Can I trust ZipInfo.file_size?
body: <p><code>ZipInfo.file_size</code> contains the size the uncompressed file in ZIP archive. May I be 100% sure, that the file will have this size after extraction, is it possible to fake it?</p>
  
  <p>I am trying to allow users to upload big files in ZIP archive. I check <code>ZipInfo.file_size</code> to prohibit files larger than 1GB, and would like to protect the file system from zip-bombing, when after extraction from ZIP archive file having <code>ZipInfo.file_size &lt; 1GB</code> is actually 1000GB.</p>