strict-path 0.1.1

Handle paths from external or unknown sources securely. Defends against 19+ real-world CVEs including symlinks, Windows 8.3 short names, and encoding tricks and exploits.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95

[dependencies.soft-canonicalize]
features = ["anchored"]
version = "0.5.3"

[dev-dependencies.app-path]
version = "1.1.2"

[dev-dependencies.dirs]
version = "6.0.0"

[dev-dependencies.serde]
features = ["derive"]
version = "1"

[dev-dependencies.serde_json]
version = "1"

[dev-dependencies.tempfile]
version = "3.22"

[[example]]
name = "app_path_integration"
path = "examples/app_path_integration.rs"

[[example]]
name = "dirs_integration"
path = "examples/dirs_integration.rs"

[[example]]
name = "marker_transformation"
path = "examples/marker_transformation.rs"

[[example]]
name = "path_boundary_one_liner"
path = "examples/path_boundary_one_liner.rs"

[[example]]
name = "tempfile_integration"
path = "examples/tempfile_integration.rs"

[[example]]
name = "user_virtual_root"
path = "examples/user_virtual_root.rs"
required-features = ["virtual-path"]

[[example]]
name = "vroot_one_liner"
path = "examples/vroot_one_liner.rs"
required-features = ["virtual-path"]

[features]
default = []
junctions = ["dep:junction"]
virtual-path = []

[lib]
name = "strict_path"
path = "src/lib.rs"

[lints.rust.unexpected_cfgs]
check-cfg = ["cfg(kani)"]
level = "warn"
priority = 0

[package]
authors = ["David Krasnitsky <dikaveman@gmail.com>"]
autobenches = false
autobins = false
autoexamples = false
autolib = false
autotests = false
build = false
categories = ["filesystem", "development-tools", "web-programming::http-server"]
description = "Handle paths from external or unknown sources securely. Defends against 19+ real-world CVEs including symlinks, Windows 8.3 short names, and encoding tricks and exploits."
documentation = "https://docs.rs/strict-path"
edition = "2021"
exclude = ["../demos/**"]
homepage = "https://github.com/DK26/strict-path-rs"
keywords = ["path", "security", "sandbox", "filesystem", "traversal"]
license = "MIT OR Apache-2.0"
name = "strict-path"
readme = "README.md"
repository = "https://github.com/DK26/strict-path-rs"
rust-version = "1.71"
version = "0.1.1"

[package.metadata.docs.rs]
all-features = true

[target."cfg(windows)".dependencies.junction]
optional = true
version = "1.4.1"

[target."cfg(windows)".dev-dependencies.junction]
version = "1.4.1"