Struct StorageState 

pub struct StorageState {
    pub cookies: Vec<StorageStateCookie>,
    pub origins: Vec<StorageStateOrigin>,
}

Playwright storage-state.json representation.

Matches the format Playwright writes via browserContext.storageState() — a cookies array plus an origins array of { origin, localStorage }. Deserialized with deny_unknown_fields so a future Playwright addition fails loudly rather than being silently ignored.

Fields

cookies: Vec<StorageStateCookie>

Cookies preserved across the session.

origins: Vec<StorageStateOrigin>

Per-origin localStorage entries.

Implementations

impl StorageState

pub fn parse_str(json: &str) -> Result<Self, CdpError>

Parse a Playwright storage-state.json from a string.

Validates every cookie name, value, domain, and path for header-injection-style payloads (control bytes) and sorts the cookies / origins / localStorage entries for deterministic injection order.

Errors

Returns CdpError::MalformedStorageState with path = "" when the JSON cannot be parsed. Returns CdpError::InvalidCookie when a cookie field contains control bytes. Callers that have a real path on hand should use Self::load_from_path instead so the error carries the source filename.

pub fn load_from_path(path: &Path) -> Result<Self, CdpError>

Read and parse a storage-state file from disk.

Errors

Returns CdpError::InvalidPath when the path fails the safe-path check, or CdpError::MalformedStorageState when the file cannot be read or parsed.

Security boundary

The safe-path check via canonicalize_safe_path is best-effort only — see that function’s docs. The canonicalize-then-open sequence has an inherent TOCTOU window where a co-located attacker with write access to a parent directory could swap the resolved file for a symlink between the check and the read. Plumb’s storage-state loader is intended for files the invoking user controls (typically a Playwright export checked into the project). It MUST NOT be treated as a sandbox against hostile local users. The full mitigation (cap_std::Dir::open) is out of scope for the wave that introduced this loader.

Trait Implementations

impl Clone for StorageState

fn clone(&self) -> StorageState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StorageState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for StorageState

fn default() -> StorageState

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for StorageState

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for StorageState

fn eq(&self, other: &StorageState) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for StorageState