Struct CalleePattern 

pub struct CalleePattern { /* private fields */ }

A pre-segmented callee pattern. Matching is segment-aware (NOT substring): the pattern is split on ., a leading * segment means “any object” (*.innerHTML matches el.innerHTML and this.node.innerHTML by suffix-matching the trailing non-* segments), and a trailing * segment means “any member” (child_process.* matches child_process.exec by prefix-matching the leading non-* segments). The security catalogue uses exact and leading-wildcard rows; the trailing form serves the boundary forbidden-call detector.

Implementations

impl CalleePattern

pub fn parse(raw: &str) -> Option<Self>

Parse a raw pattern string into its segmented form. Returns None for an empty or whitespace-only pattern. Public constructor for non-security reusers of the segment-aware matcher (the boundary forbidden-call detector); the catalogue’s own rows go through the same parser.

pub fn raw(&self) -> &str

The original pattern text, for evidence templating.

pub fn matches(&self, callee_path: &str) -> bool

Segment-aware match against a captured dotted/bare callee path.

With a leading *, the trailing segments must equal the tail of the candidate’s segments (suffix match), so *.innerHTML matches el.innerHTML but not el.innerHTMLFoo. With a trailing *, the leading segments must equal the head of the candidate’s segments (prefix match), so child_process.* matches child_process.exec but not the bare child_process. Without either, the whole segment list must match exactly, so fetch matches fetch but not myfetch. Patterns carrying BOTH wildcards match nothing (rejected by the config layer; never produced by catalogue rows).

pub fn matched_receiver<'p>(&self, callee_path: &'p str) -> Option<&'p str>

The receiver segment immediately before this pattern’s matched suffix, for a leading-*. wildcard pattern: *.query against db.query returns Some("db"), against ctx.req.query returns Some("req") (the segment right before query, which is the receiver of the matched member). Used by a source row’s receiver allowlist to keep HTTP-input patterns from firing on ORM / data-access receivers (issue #1092). Returns None for an exact (non-wildcard) pattern, whose receiver is fixed in the pattern itself, and for any callee_path this pattern does not match.

Trait Implementations

impl Clone for CalleePattern

fn clone(&self) -> CalleePattern

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CalleePattern

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.