strict-path 0.2.2

Secure path handling for untrusted input. Prevents directory traversal, symlink escapes, and 19+ real-world CVE attack patterns.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120

# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
#
# When uploading crates to the registry Cargo will automatically
# "normalize" Cargo.toml files for maximal compatibility
# with all versions of Cargo and also rewrite `path` dependencies
# to registry (e.g., crates.io) dependencies.
#
# If you are reading this file be aware that the original Cargo.toml
# will likely look very different (and much more reasonable).
# See Cargo.toml.orig for the original contents.

[package]
edition = "2021"
rust-version = "1.76"
name = "strict-path"
version = "0.2.2"
authors = ["David Krasnitsky <dikaveman@gmail.com>"]
build = false
exclude = ["../demos/**"]
autolib = false
autobins = false
autoexamples = false
autotests = false
autobenches = false
description = "Secure path handling for untrusted input. Prevents directory traversal, symlink escapes, and 19+ real-world CVE attack patterns."
homepage = "https://github.com/DK26/strict-path-rs"
documentation = "https://docs.rs/strict-path"
readme = "README.md"
keywords = [
    "path",
    "security",
    "sandbox",
    "sanitization",
    "traversal",
]
categories = [
    "filesystem",
    "development-tools",
    "web-programming::http-server",
]
license = "MIT OR Apache-2.0"
repository = "https://github.com/DK26/strict-path-rs"

[package.metadata.docs.rs]
all-features = true

[features]
default = []
junctions = ["dep:junction"]
virtual-path = []

[lib]
name = "strict_path"
path = "src/lib.rs"

[[example]]
name = "app_path_integration"
path = "examples/app_path_integration.rs"

[[example]]
name = "dirs_integration"
path = "examples/dirs_integration.rs"

[[example]]
name = "marker_transformation"
path = "examples/marker_transformation.rs"

[[example]]
name = "path_boundary_one_liner"
path = "examples/path_boundary_one_liner.rs"

[[example]]
name = "tempfile_integration"
path = "examples/tempfile_integration.rs"

[[example]]
name = "user_virtual_root"
path = "examples/user_virtual_root.rs"
required-features = ["virtual-path"]

[[example]]
name = "vroot_one_liner"
path = "examples/vroot_one_liner.rs"
required-features = ["virtual-path"]

[dependencies.soft-canonicalize]
version = "0.5.6"
features = ["anchored"]

[dev-dependencies.app-path]
version = "1.1.2"

[dev-dependencies.dirs]
version = "6.0.0"

[dev-dependencies.serde]
version = "1"
features = ["derive"]

[dev-dependencies.serde_json]
version = "1"

[dev-dependencies.tempfile]
version = "3.27.0"
default-features = false

[target."cfg(windows)".dependencies.dunce]
version = "1.0"

[target."cfg(windows)".dependencies.junction]
version = "1.4.2"
optional = true

[target."cfg(windows)".dev-dependencies.junction]
version = "1.4.2"

[lints.rust.unexpected_cfgs]
level = "warn"
priority = 0
check-cfg = ["cfg(kani)"]