strict-path 0.1.2

Handle paths from external or unknown sources securely. Defends against 19+ real-world CVEs including symlinks, Windows 8.3 short names, and encoding tricks and exploits.
Documentation
1
2
3
4
5
// This file has been split into thematic submodules. All tests have been moved to:
//   security_traversal.rs       - CVE patterns, unicode, concurrent, long path, Windows attacks
//   security_symlink_escape.rs  - Symlink/junction escape, TOCTOU, zip/tar slip extraction
//   security_input_encoding.rs  - Mixed separators, non-UTF8, deep traversal, Windows edge cases
//   security_io.rs              - I/O operations (append/write/read) through symlinks, circular symlinks