untrusted_value 0.3.2

This crate aim to provide a type-safe way to handle and sanitize potentially untrusted values like user input.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

use untrusted_value::derive::untrusted_inputs;
use untrusted_value::SanitizeWith;

#[allow(clippy::unnecessary_wraps)]
fn no_sanitize<T>(value: T) -> Result<T, ()> {
    Ok(value)
}

// Imagine: some webserver specification
// #[oai(path = "/"), method = "get"]
#[untrusted_inputs]
fn index(name: &str) -> Result<String, ()> {
    // we can not use name directly, since it is
    // wrapped in an UntrustedValue

    let name = name.sanitize_with(no_sanitize)?;
    Ok(format!("Hello, {name}!"))
}

fn main() {
    // do a call to index route
    assert!(index("<script>alert('xss')</script>").is_err());
}