Struct EnvGuard 

pub struct EnvGuard { /* private fields */ }

The policy applied to a set of secrets before they reach a child.

Implementations

impl EnvGuard

pub fn strict() -> Self

The default policy: loader-controlling names are refused.

pub fn permissive() -> Self

The policy --allow-unsafe-env selects.

pub fn check(self, name: &str) -> Result<(), GuardError>

Checks a single name against the policy.

Errors

Returns GuardError::LoaderControlled for a name the loader or a language runtime interprets, unless the guard is permissive.

pub fn check_all<'a>( self, names: impl IntoIterator<Item = &'a str>, ) -> Result<(), GuardError>

Checks every name, failing on the first refusal.

Fails the whole launch rather than dropping the offending variable: a child started with a silently missing variable is a debugging problem, and a child started with a silently present one is a breach.

Errors

See EnvGuard::check.

Trait Implementations

impl Clone for EnvGuard

fn clone(&self) -> EnvGuard

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for EnvGuard

impl Debug for EnvGuard

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EnvGuard

fn default() -> EnvGuard

Returns the “default value” for a type.

impl Eq for EnvGuard

impl PartialEq for EnvGuard

fn eq(&self, other: &EnvGuard) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for EnvGuard