Skip to main content

scope_contains

wire

Function scope_contains 

Source 
pub fn scope_contains(scope: &str, candidate: &str) -> bool
Expand description

Whether candidate is the scope namespace itself or a descendant of it, compared whole-segment by whole-segment.

Hardening rules (deny-by-default):

  • Any . or .. segment in either string is rejected outright. We never normalize traversal segments — a path that needs normalizing is denied.
  • Empty segments (a//b, leading/trailing /, or the empty string) are rejected outright, so /-boundary tricks cannot smuggle segments past the comparison.
  • Comparison is per-segment, so scope a/b does NOT match a/bc (the classic non-boundary prefix bug) and never grants upward access (scope a/b does not match a).