# JSZip 3.8.0

- Product: JSZip (https://whatsnew.fyi/product/jszip)
- Vendor: Stuart Knightley
- Date: 2022-03-30
- Version: 3.8.0
- Original notes: https://www.npmjs.com/package/jszip/v/3.8.0
- Permalink: https://whatsnew.fyi/product/jszip/releases/3.8.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Sanitize filenames when files are loaded with loadAsync to avoid zip slip attacks, with the original filename available on each zip entry as unsafeOriginalName

- Santize filenames when files are loaded with `loadAsync`, to avoid ["zip slip" attacks](https://snyk.io/research/zip-slip-vulnerability). The original filename is available on each zip entry as `unsafeOriginalName`. See the [documentation](https://stuk.github.io/jszip/documentation/api_jszip/load_async.html). Many thanks to McCaulay Hudson for reporting.