zenops-safe-relative-path-validator 0.2.0

Shared traversal-validation logic for `zenops-safe-relative-path`.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

use relative_path::{Component, RelativePath};

pub fn is_safe_relative_path(path: impl AsRef<RelativePath>) -> bool {
    path.as_ref()
        .components()
        .all(|c| matches!(c, Component::CurDir | Component::Normal(_)))
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn test_validate_safe_paths() {
        assert!(is_safe_relative_path("foo/bar"));
        assert!(is_safe_relative_path("./foo/bar"));
        assert!(is_safe_relative_path(""));
        assert!(is_safe_relative_path("."));
    }

    #[test]
    fn test_validate_unsafe_paths() {
        assert!(!is_safe_relative_path("../foo"));
        assert!(!is_safe_relative_path("foo/../bar"));
        assert!(!is_safe_relative_path("foo/../../bar"));
        assert!(!is_safe_relative_path("foo/../../foo/bar"));
        assert!(!is_safe_relative_path(".."));
        assert!(!is_safe_relative_path("a/b/c/../.."));
        assert!(!is_safe_relative_path("a/../.."));
    }
}