Struct NeutralizationConfig 

pub struct NeutralizationConfig {
    pub mode: NeutralizationMode,
    pub backup_originals: bool,
    pub audit_all_actions: bool,
    pub unicode: UnicodeNeutralizationConfig,
    pub injection: InjectionNeutralizationConfig,
    pub recovery: Option<RecoveryConfig>,
}

Configuration for neutralization

Security Implications

Neutralization transforms detected threats into safe content:

• Mode selection - Balance between security and data integrity
• Backup strategy - Enables recovery but requires secure storage
• Audit requirements - Essential for compliance and forensics
• Recovery handling - Prevents neutralization failures from causing outages

Example: Secure Production Configuration

[neutralization]
mode = "automatic"           # Auto-neutralize threats
backup_originals = true      # Keep originals for recovery
audit_all_actions = true     # Full audit trail

[neutralization.unicode]
bidi_replacement = "marker"  # Visible markers for BiDi
zero_width_action = "remove" # Remove invisible chars
homograph_action = "ascii"   # Convert to ASCII

[neutralization.injection]
sql_action = "parameterize"  # Convert to safe queries
command_action = "escape"    # Escape shell metacharacters
path_action = "normalize"    # Resolve to safe paths
prompt_action = "wrap"       # Add safety boundaries

[neutralization.recovery]
enabled = true
max_retries = 3
backoff_ms = 100

Fields

mode: NeutralizationMode

Neutralization mode

Default: ReportOnly (safe default) Security Trade-offs:

• ReportOnly: Detects but doesn’t modify (safe for testing)
• Interactive: Requires user confirmation (good for sensitive data)
• Automatic: Immediate protection (recommended for production)

backup_originals: bool

Backup original content

Default: true (secure by default) Security: Enables recovery from false positives but requires secure storage. Backups should be encrypted and access-controlled. Warning: Disabling prevents recovery from mistakes

audit_all_actions: bool

Audit all actions

Default: true (secure by default) Security: Creates forensic trail for all neutralization actions. Essential for compliance, debugging, and incident response. Storage: Ensure audit logs are tamper-proof and retained properly

unicode: UnicodeNeutralizationConfig

Unicode-specific settings

Security: Controls how unicode-based threats are neutralized. Different strategies balance security vs. internationalization needs.

injection: InjectionNeutralizationConfig

Injection-specific settings

Security: Defines how various injection attacks are neutralized. Each injection type requires specific handling to maintain functionality.

recovery: Option<RecoveryConfig>

Recovery configuration for handling failures

Default: Enabled with sensible retry settings Security: Prevents neutralization failures from causing service outages. Implements circuit breakers and exponential backoff.

Trait Implementations

impl Clone for NeutralizationConfig

fn clone(&self) -> NeutralizationConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NeutralizationConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NeutralizationConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for NeutralizationConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for NeutralizationConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.