Secure extraction

extractZip() treats every archive as hostile until proven otherwise. Run the two crafted archives below — a zip-slip and a header-inconsistent one — and watch each refusal come back as a typed err.code. Then drop your own to see what passes.