Expand description
Entry-name validation helpers. Entry-name validation and sanitization.
Encrypted containers store filenames. A malicious container (or a hostile
peer) can embed names like ../../.ssh/id_rsa; anything reconstructed
from stored names and joined onto a user-supplied destination must pass
through [sanitize_entry_name] first.
Constants§
- MAX_
NAME_ LEN - Maximum accepted entry-name length in bytes.
Functions§
- sanitize_
stored_ name - Makes an untrusted, previously-stored name safe to join onto a filesystem path.
- validate_
new_ name - Validates a name supplied for a new vault entry.