pompelmi
Version:
RFI-safe file uploads for Node.js — Express/Koa/Next.js middleware with deep ZIP inspection, MIME/size checks, and optional YARA scanning.
20 lines (19 loc) • 575 B
TypeScript
/**
* createZipTraversalGuard – guards against path traversal & header spoofing in ZIPs.
* EXPECTS: caller provides an iterator over entries with metadata (name, isSymlink, target?, from CEN & LFH).
* Return non-empty array to flag.
*/
export type EntryMeta = {
nameCEN: string;
nameLFH: string;
isSymlink?: boolean;
linkTarget?: string;
};
export declare function createZipTraversalGuard(): {
id: string;
scan(entries: AsyncIterable<EntryMeta>): Promise<{
rule: string;
severity: "suspicious";
msg: string;
}[]>;
};