Expand description
secure_output — Output encoding for HTML, JSON, URL, JS, CSS, XML, LDAP, and shell contexts (OWASP C4).
Provides the OutputEncoder open trait and concrete implementations:
HtmlEncoder— HTML context encoding with zero-copy for safe stringsJsonEncoder— JSON context encoding preventing</script>injectionUrlEncoder— URL percent-encoding per RFC 3986JsStringEncoder— JavaScript string literal encodingCssEncoder— CSS context encoding via unicode-escapeXmlEncoder— XML text/attribute encodingldap::LdapDnEncoder— LDAP Distinguished Name encoding (RFC 4514)ldap::LdapFilterEncoder— LDAP search filter encoding (RFC 4515)shell::ShellEncoder— POSIX shell argument encoding
Also provides:
sanitize_uri_scheme()— blocks dangerous URI schemes (javascript:, data:, etc.)
Re-exports§
pub use css::CssEncoder;pub use encode::OutputEncoder;pub use html::HtmlEncoder;pub use js::JsStringEncoder;pub use json::JsonEncoder;pub use ldap::LdapDnEncoder;pub use ldap::LdapFilterEncoder;pub use shell::ShellEncoder;pub use uri::sanitize_uri_scheme;pub use uri::DangerousUriScheme;pub use url::UrlEncoder;pub use xml::XmlEncoder;
Modules§
- css
- CSS context encoder.
- encode
- Output encoder trait.
- html
- HTML context encoder.
- js
- JavaScript string context encoder.
- json
- JSON context encoder.
- ldap
- LDAP output encoders for DN (RFC 4514) and filter (RFC 4515) contexts.
- shell
- OS shell context encoder.
- uri
- URI scheme sanitiser.
- url
- URL context encoder.
- xml
- XML context encoder.