strict-path 0.2.2

Secure path handling for untrusted input. Prevents directory traversal, symlink escapes, and 19+ real-world CVE attack patterns.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

use crate::PathBoundary;

#[test]
fn test_virtual_path_accessors_and_prefixes() {
    let temp = tempfile::tempdir().unwrap();
    let restriction = PathBoundary::<()>::try_new(temp.path()).unwrap();
    let jailed = restriction.strict_join("foo/bar.txt").unwrap();
    let virtual_path = jailed.virtualize();

    // file name
    let fname = virtual_path.virtualpath_file_name().expect("file name");
    assert_eq!(fname.to_string_lossy(), "bar.txt");

    // file stem
    let stem = virtual_path.virtualpath_file_stem().expect("file stem");
    assert_eq!(stem.to_string_lossy(), "bar");

    // extension
    let ext = virtual_path.virtualpath_extension().expect("ext");
    assert_eq!(ext.to_string_lossy(), "txt");

    // starts_with / ends_with (virtual)
    assert!(virtual_path.virtualpath_starts_with("foo"));
    assert!(virtual_path.virtualpath_ends_with("bar.txt"));

    // virtualpath_parent
    let parent = virtual_path.virtualpath_parent().unwrap().unwrap();
    assert_eq!(parent.virtualpath_display().to_string(), "/foo");
}