File - ZIP Extract

Type identifier: file:zip:extract Category: File Operations

Description

The File - ZIP Extract node extracts files from a ZIP archive, applying security validations to prevent malicious archives from causing harm. It supports file pattern filtering and size limits, returning the extracted files as an array that can be processed by other nodes.

Input Handles

Output Handles

Configuration Options

Behaviour

1. Receives a ZIP file from the input handle

2. Validates the ZIP archive for security concerns:

   • Total file count limit
   • Maximum uncompressed size
   • Compression ratio (zip bomb detection)
   • Processing time limit

3. Iterates through archive entries, applying:

   • Path sanitisation (prevents path traversal attacks)
   • File pattern matching (if configured)
   • Individual file size limits
4. Extracts matching files
5. Returns array of file entries for extracted files
6. Triggers success or error control flow

Security Validations

Path Sanitisation

Entry names are sanitised to prevent attacks:

• Null bytes are rejected
• Path traversal (..) is blocked
• Absolute paths are rejected
• Control characters are rejected
• Windows reserved characters are rejected

File Pattern Matching

When a file pattern is specified, it uses glob matching:

• *.pdf — Match all PDF files
• images/*.png — Match PNG files in images folder
• **/*.txt — Match text files in any subfolder

Examples

Extract All Files

Configuration:

• File Pattern: (empty — extracts all)
• Max File Size: 10 MB

Use case: Extract all files from a user-uploaded archive for processing.

Extract Specific File Types

Configuration:

• File Pattern: *.csv
• Max File Size: 5 MB

Use case: Extract only CSV files from a data archive for import.

Extract with Size Limit

Configuration:

• File Pattern: documents/*
• Max File Size: 50 MB

Use case: Extract documents from a specific folder with a larger size limit.