October 10, 2019
https://issues.dlang.org/show_bug.cgi?id=20290

          Issue ID: 20290
           Summary: std.zip: file(name) and directory issues
           Product: D
           Version: D2
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P1
         Component: phobos
          Assignee: nobody@puremagic.com
          Reporter: bugzilla@d-ecke.de

Taken from #20027:

Rejects directories that pretend to be files, i.e. with compressed or uncompressed sizes not equal to 0.

Rejects file names containing null bytes.

Rejects file names containing backslashes. All slashes must be forward slashes according to the spec.

Rejects file names exceeding 256 bytes.

Rejects directory traversal via file name.

Rejects directory traversal via symlink.

Rejects compressed symlinks.

Rejects symlinks that exceed 1024 bytes.

--