v0.1.7

v0.1.7 - 2026-03-08

Security & Bug Fixes

• Input Validation & Bound Checks: Hardened input validation across the library to prevent out-of-bounds panics when processing malformed or truncated compressed data. Added strict minimum data length constraints to the Gzip header parser (gzs), Zlib header parser (zls), and ZIP archive footer readers.
• ZipSlip Protection: Explicitly secured unzip_sync by adding a new is_unsafe_path guard. The extractor will now proactively reject and raise errors for any ZIP entries attempting directory traversals (e.g., containing ../ or absolute root paths) to prevent malicious arbitrary file overwriting.

Chores

• Testing: Added 33 new unit tests focusing on error handling for corrupted/truncated payloads, streaming API basics, and tiny data limits.