Skip to main content

audit_entry

Function audit_entry 

Source
pub fn audit_entry(info: &TrashInfo, entry: &TrashEntry) -> Vec<Finding>
Expand description

Audit a parsed .trashinfo record together with its info/files/ pairing, returning a canonical Finding for each anomaly detected.

Detects purged content (info/ without files/), a path-traversal stored Path=, and a missing/unparseable deletion time. A well-formed record with content and a deletion time yields no findings.