strict-path 0.1.2

Handle paths from external or unknown sources securely. Defends against 19+ real-world CVEs including symlinks, Windows 8.3 short names, and encoding tricks and exploits.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

// One-liner PathBoundary demo
//
// Create a PathBoundary and operate on a path in a single chained expression.
//
// **External Input Pattern**: In production, the file name passed to `strict_join()`
// would come from an external source (CLI args, HTTP request, config file). Here
// we use a constant for brevity, but the validation pattern is identical.

use strict_path::PathBoundary;

fn main() -> Result<(), Box<dyn std::error::Error>> {
    // True one-liner: write file in single chained expression
    let tmp_dir = tempfile::tempdir()?;
    PathBoundary::<()>::try_new(&tmp_dir)?
        .strict_join("hello.txt")?
        .write("hello from a strict path\n")?;

    // One-liner read with size calculation
    let bytes_read = PathBoundary::<()>::try_new(&tmp_dir)?
        .strict_join("hello.txt")?
        .read()?
        .len();
    println!("One-liner PathBoundary: read {bytes_read} bytes");

    // Note: temp directory cleanup is automatic
    Ok(())
}