Skip to main content

PathTraversalRule

Struct PathTraversalRule 

Source
pub struct PathTraversalRule { /* private fields */ }
Expand description

Rejects input containing path traversal patterns.

Detects:

  • .. components (parent directory traversal)
  • Absolute paths (/ prefix on Unix, drive letters on Windows)

This is a lexical check — no filesystem access is performed. URL-encoded sequences (e.g. %2e%2e) or other encodings are not decoded before inspection. Callers must decode the input before passing it to this rule if encoded traversal is a concern.

§Rationale

Path traversal allows escaping a base directory:

../../etc/passwd
/absolute/path/escape

Implementations§

Source§

impl PathTraversalRule

Source

pub fn allow_absolute() -> Self

Create a rule that allows absolute paths (only rejects ..).

Trait Implementations§

Source§

impl Default for PathTraversalRule

Source§

fn default() -> Self

Returns the “default value” for a type. Read more
Source§

impl Rule for PathTraversalRule

Source§

fn name(&self) -> &'static str

A unique, human-readable identifier for this rule.
Source§

fn check(&self, input: &str) -> RuleResult

Check the input and return violations, if any.

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.