Module path_guard 

Classifier for the “relative paths only, no ..” policy used by every attachment-loading entry point that has no sandbox/allowed_paths configuration available to it (currently /image).

This is deliberately not a sandbox: it has no notion of allowed roots and does not canonicalize or touch the filesystem. It only classifies a path string as absolute, ..-traversing, or acceptable, so every caller enforcing “relative paths only” applies the exact same rule and reports the exact same classification — closing the drift risk of three independent, textually-similar-but-not-identical checks (one such check previously missed the Windows leading-/ guard the other two had).

Enums

PathRejection

Outcome of classifying a path against the “relative, no ..” policy.

Functions

classify_relative_path

Classify path against the “relative paths only, no ..” policy.