← All repos

ronomon/zip

View on GitHub ↗ ★ 257 JavaScript

Robust ZIP decoder with defenses against dangerous compression ratios, spec deviations, malicious archive signatures, mismatching local and central directory headers, ambiguous UTF-8 filenames, directory and symlink traversals, invalid MS-DOS dates, overlapping headers, overflow, underflow, sparseness, accidental buffer bleeds etc.

4 mentions on Hacker News by 2 people: 1 story, 3 comments · first 2019-07-04 · latest 2025-08-26