barseghyanartur / safezip / 23220856994

89%

main: 89%

Build Type

Pull #47

github

Committed by web-flow

Commit Message

Feature/improvements (#46)

- **Comprehensive zip bomb detection**: Replaced `ZipInspector` with full
  Fifield 2019 detection (overlap, extra-field quoting, per-file/aggregate
  ratio, Zip64, bzip2). Configurable thresholds.
- **Content-based nested archive detection**: Uses `zipfile.is_zipfile()`
  instead of extension-only checks; prevents extension-spoofing attacks.
- **Permission sanitisation**: New `strip_special_bits` option strips
  setuid/setgid/sticky bits from extracted files (default: True).
- **Module-level env-var caching**: Default limits cached at import time for
  performance, with runtime env-var overrides still supported.
- **Event improvements**: Added `nesting_depth_exceeded` event type.
- **Type safety**: Added explicit `TypeError` for `None` path in `extract()`.
- **Documentation**: Updated ARCHITECTURE.rst with new features.

Pull Request Pull Request #47: Feature/improvements (#46)

Run Details

337 of 400 new or added lines in 6 files covered. (84.25%)

26 existing lines in 1 file now uncovered.

1954 of 2178 relevant lines covered (89.72%)

4.48 hits per line