Warn about decompression bombs

Docs for #515.

 * Is the text ok?
 * Is the markup correct?