Filename sanitization about laravel-zipstream

[jszobody]

I often generate zips from dynamic user-provided input, like projects names. I've personally had a lot of issues where zips break because of a character that isn't allowed in a Windows filepath, or even strange zerowidth unicode characters, stuff like that. I decided I wanted to just convert everything to ascii to eliminate any issues with invalid characters.

You can absolutely turn off the ascii sanitization, it's definitely a sledgehammer approach that wouldn't work if you want to allow other character sets. Just consider what you're allowing through in your zip file name, and zip paths.

[kw-pr]

Thanks I finally disabled your escaping and added my own:

$filename = preg_replace('/[^[:alnum:] ._~-]+/u', '_', $filename);

I checked this with the 44k filenames I have in my database.