How do I extract zip to a path

[rizrmd]

Is there any example that I can copy paste ?

[greggman]

const unzipit = require('unzipit');
const path = require('path');
const fs = require('fs');

async function unzip(filename, dstPath) {
  const buf = fs.readFileSync(filename);
  const {entries} = await unzipit.unzip(new Uint8Array(buf));

  for (const entry of Object.values(entries)) {
    if (entry.isDirectory) {
      continue;
    }
    const data = await entry.arrayBuffer();

    const dst = path.join(dstPath, entry.name);

    // WARNING:!!! It's up to you to check this path
    // is ok. If a zip file was constructed with a name like
    // ../../../.bashrc or something like that it could
    // write outside the dstPath

    console.log('writing:', dst);
    fs.mkdirSync(path.dirname(dst), {recursive: true});
    fs.writeFileSync(dst, new Uint8Array(data));
  }
}

Note: It would use less memory to use one of the node file readers in the README

[greggman]

checking if path is valid (the warning above), this would probably work

const absDstPath = path.absPath(dstPath);
const absPath = path.absPath(dst);
const isValid = absPath.startsWith(absDstPath);
if (!isValid) {
    throw new Error(`malicious zip file! Had path "${entry.name}"`);
}