Struct CalleePattern 

pub struct CalleePattern { /* private fields */ }

A pre-segmented callee pattern. Matching is segment-aware (NOT substring): the pattern is split on ., a leading * segment means “any object” (*.innerHTML matches el.innerHTML and this.node.innerHTML by suffix-matching the trailing non-* segments), and a trailing * segment means “any member” (child_process.* matches child_process.exec by prefix-matching the leading non-* segments). The security catalogue uses exact and leading-wildcard rows; the trailing form serves the boundary forbidden-call detector.

Implementations

impl CalleePattern

pub fn parse(raw: &str) -> Option<Self>

Parse a raw pattern string into its segmented form. Returns None for an empty or whitespace-only pattern. Public constructor for non-security reusers of the segment-aware matcher (the boundary forbidden-call detector); the catalogue’s own rows go through the same parser.

pub fn raw(&self) -> &str

The original pattern text, for evidence templating.

pub fn matches(&self, callee_path: &str) -> bool

Segment-aware match against a captured dotted/bare callee path.

With a leading *, the trailing segments must equal the tail of the candidate’s segments (suffix match), so *.innerHTML matches el.innerHTML but not el.innerHTMLFoo. With a trailing *, the leading segments must equal the head of the candidate’s segments (prefix match), so child_process.* matches child_process.exec but not the bare child_process. Without either, the whole segment list must match exactly, so fetch matches fetch but not myfetch. Patterns carrying BOTH wildcards match nothing (rejected by the config layer; never produced by catalogue rows).

Trait Implementations

impl Clone for CalleePattern

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CalleePattern

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.