ziputil

func FindUnsafeZipPaths ¶

func FindUnsafeZipPaths(zr *zip.Reader) ([]string, error)

FindUnsafeZipPaths scans all entries in a zip.Reader and returns a slice of unsafe paths. Unsafe paths include:

• directory traversal (../ or ..\)
• absolute paths (/foo, C:\foo)
• drive letters
• null-byte injection

Returns a non-nil error if any unsafe paths are detected.

func SecureUnzip ¶

func SecureUnzip(zr *zip.Reader, dest string) error

SecureUnzip extracts all files from a zip.Reader to the destination directory. It uses FindUnsafeZipPaths to prevent directory traversal or unsafe paths.

func StreamScanZipPaths ¶

func StreamScanZipPaths(r io.Reader) ([]string, error)

StreamScanZipPaths streams a ZIP from io.Reader to a temp file and validates it using FindUnsafeZipPaths.