secure_output 0.1.0

Context-aware output encoding and URI sanitization for safer application responses.

Coverage
100%
34 out of 34 items documented20 out of 22 items with examples
Size
Source code size: 82.5 kB This is the summed size of all the files inside the crates.io package for this release.
Documentation size: 1.02 MB This is the summed size of all files generated by rustdoc for all configured targets
Ø build duration
this release: 20s Average build duration of successful builds.
all releases: 18s Average build duration of successful builds in releases after 2024-10-23.
Links
kerberosmansour/SunLitSecurityLibraries
0 0 0
crates.io
Dependencies
- security_core ^0.1.0 normal
- proptest ^1 dev
Versions
Owners

secure_output — Output encoding for HTML, JSON, URL, JS, CSS, XML, LDAP, and shell contexts (OWASP C4).

Provides the [OutputEncoder] open trait and concrete implementations:

[HtmlEncoder] — HTML context encoding with zero-copy for safe strings
[JsonEncoder] — JSON context encoding preventing </script> injection
[UrlEncoder] — URL percent-encoding per RFC 3986
[JsStringEncoder] — JavaScript string literal encoding
[CssEncoder] — CSS context encoding via unicode-escape
[XmlEncoder] — XML text/attribute encoding
[ldap::LdapDnEncoder] — LDAP Distinguished Name encoding (RFC 4514)
[ldap::LdapFilterEncoder] — LDAP search filter encoding (RFC 4515)
[shell::ShellEncoder] — POSIX shell argument encoding

Also provides:

[sanitize_uri_scheme()] — blocks dangerous URI schemes (javascript:, data:, etc.)