strict-path 0.2.1

Secure path handling for untrusted input. Prevents directory traversal, symlink escapes, and 19+ real-world CVE attack patterns.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

//! `VirtualPathDisplay` — formats a `VirtualPath` as a rooted, forward-slash string.
//!
//! Returns the virtual (user-facing) view, not the real system path. The real path is
//! intentionally hidden to prevent leaking host filesystem structure in API responses,
//! error messages, or multi-tenant UIs. Use `strictpath_display()` when the real path
//! is needed (e.g., for system administrators or internal logging).
use super::VirtualPath;
use std::fmt;

pub struct VirtualPathDisplay<'vpath, Marker>(pub(super) &'vpath VirtualPath<Marker>);

impl<'vpath, Marker> fmt::Display for VirtualPathDisplay<'vpath, Marker> {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        // Sanitize each Normal component at display time so that virtual_path
        // stores raw OS names (preserving correct navigation via virtual_join).
        use std::path::Component;
        let mut parts: Vec<String> = Vec::new();
        for comp in self.0.virtual_path.components() {
            if let Component::Normal(name) = comp {
                let s = name.to_string_lossy();
                parts.push(super::sanitize_display_component(&s));
            }
        }
        if parts.is_empty() {
            write!(f, "/")
        } else {
            write!(f, "/{}", parts.join("/"))
        }
    }
}