Struct PathValidator 

pub struct PathValidator { /* private fields */ }

Path validator that ensures paths stay within allowed directories

Example

use ruvector_security::PathValidator;
use std::path::PathBuf;

// Create validator with allowed directories
let validator = PathValidator::new(vec![PathBuf::from("/data"), PathBuf::from("/tmp")]);

// Paths within allowed directories are valid
// (Note: these paths must exist for validate() to succeed)
// validator.validate("/data/vectors.db");

// Paths outside allowed directories are rejected
assert!(validator.validate("/etc/passwd").is_err());

// Path traversal attempts are rejected
assert!(validator.validate("/data/../etc/passwd").is_err());

Implementations

impl PathValidator

pub const DEFAULT_MAX_PATH_LENGTH: usize = 4_096usize

Maximum allowed path length (default 4096)

pub fn new(allowed_dirs: Vec<PathBuf>) -> Self

Create a new path validator with allowed directories

pub fn allow_symlinks(self, allow: bool) -> Self

Set whether symlinks are allowed

pub fn max_path_length(self, length: usize) -> Self

Set maximum path length

pub fn validate<P: AsRef<Path>>(&self, path: P) -> SecurityResult<PathBuf>

Validate a path and return the canonical path if valid

Errors

Returns an error if:

• The path contains path traversal sequences (..)
• The path is outside all allowed directories
• The path is a symlink (unless allowed)
• The path exceeds maximum length

pub fn validate_new_file<P: AsRef<Path>>( &self, path: P, ) -> SecurityResult<PathBuf>

Validate a path for a new file (may not exist yet)

This validates the parent directory exists and is within allowed paths, and that the filename is safe.

Trait Implementations

impl Clone for PathValidator

fn clone(&self) -> PathValidator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PathValidator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PathValidator

fn default() -> Self

Returns the “default value” for a type.