Struct PathValidator 

pub struct PathValidator { /* private fields */ }

Validates script paths to prevent directory traversal attacks

Ensures script paths are:

• Absolute or properly canonicalized
• Within an expected base directory
• Not symlinks (optional, configurable)

Implementations

impl PathValidator

pub fn new(base_dir: impl Into<PathBuf>) -> Self

Create a new path validator with a base directory

Arguments

• base_dir - The base directory that scripts must be under

pub fn allow_symlinks(self, allow: bool) -> Self

Allow symlinks (default: false)

By default, symlinks are rejected for security. Set this to true to allow scripts to be symlinks (use with caution).

pub fn validate(&self, path: &Path) -> Result<PathBuf>

Validate a script path

Checks that:

1. The path exists and is a file
2. The canonical path is within base_dir
3. The path is not a symlink (unless allowed)

Errors

Returns error if path is invalid, outside base directory, or is a disallowed symlink

Trait Implementations

impl Clone for PathValidator

fn clone(&self) -> PathValidator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PathValidator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.