Format rules
- Entries have paths
- Compression method varies
- Zip slip path traversal is a risk
Valid example
Archive project files with relative paths.
Invalid example
Extracting without path validation
Common errors
- Assuming ZIP accepts syntax from a similar format
- Using the wrong encoding or line ending
- Copying invisible characters from rich text
- Testing only the happy path and not parser errors
Online validation and conversion
Compared with nearby formats
ZIP should be chosen for the parser and ecosystem that will consume it. Prefer strict formats for APIs, human-friendly formats for ops config, and signed formats only when verification is required.