strict-path 0.1.0

Handle paths from external or unknown sources securely. Minimal, restrictive, explicit API. Mathematically proves paths stay within boundaries using Rust's type system. StrictPath detects escapes, VirtualPath contains them. Handles symlinks, 19+ CVEs, Windows 8.3 names, Linux containers.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95

[dependencies.soft-canonicalize]
features = ["anchored"]
version = "0.5.3"

[dev-dependencies.app-path]
version = "1.1.2"

[dev-dependencies.dirs]
version = "6.0.0"

[dev-dependencies.serde]
features = ["derive"]
version = "1"

[dev-dependencies.serde_json]
version = "1"

[dev-dependencies.tempfile]
version = "3.22"

[[example]]
name = "app_path_integration"
path = "examples/app_path_integration.rs"

[[example]]
name = "dirs_integration"
path = "examples/dirs_integration.rs"

[[example]]
name = "marker_transformation"
path = "examples/marker_transformation.rs"

[[example]]
name = "path_boundary_one_liner"
path = "examples/path_boundary_one_liner.rs"

[[example]]
name = "tempfile_integration"
path = "examples/tempfile_integration.rs"

[[example]]
name = "user_virtual_root"
path = "examples/user_virtual_root.rs"
required-features = ["virtual-path"]

[[example]]
name = "vroot_one_liner"
path = "examples/vroot_one_liner.rs"
required-features = ["virtual-path"]

[features]
default = []
junctions = ["dep:junction-verbatim"]
virtual-path = []

[lib]
name = "strict_path"
path = "src/lib.rs"

[lints.rust.unexpected_cfgs]
check-cfg = ["cfg(kani)"]
level = "warn"
priority = 0

[package]
authors = ["David Krasnitsky <dikaveman@gmail.com>"]
autobenches = false
autobins = false
autoexamples = false
autolib = false
autotests = false
build = false
categories = ["filesystem", "development-tools", "web-programming::http-server"]
description = "Handle paths from external or unknown sources securely. Minimal, restrictive, explicit API. Mathematically proves paths stay within boundaries using Rust's type system. StrictPath detects escapes, VirtualPath contains them. Handles symlinks, 19+ CVEs, Windows 8.3 names, Linux containers."
documentation = "https://docs.rs/strict-path"
edition = "2021"
exclude = ["../demos/**"]
homepage = "https://github.com/DK26/strict-path-rs"
keywords = ["path", "security", "sandbox", "filesystem", "traversal"]
license = "MIT OR Apache-2.0"
name = "strict-path"
readme = "README.md"
repository = "https://github.com/DK26/strict-path-rs"
rust-version = "1.71"
version = "0.1.0"

[package.metadata.docs.rs]
all-features = true

[target."cfg(windows)".dependencies.junction-verbatim]
optional = true
version = "1.3.0"

[target."cfg(windows)".dev-dependencies.junction-verbatim]
version = "1.3.0"