I have a system where the client will send the files through HTTP requests which are then processed in the back end. The concern is that xlsx files can act as zip bombs. Given this, are there a) services that allow you to process and unpack files on their side? b) Does it make sense to extract the data on the client side, check the size, and rezip it before sending? Wouldn't that just use the client's resources for this?

Any other alternatives are welcome.