Struct SecurityConfig 

pub struct SecurityConfig {
    pub allowed_script_dirs: Vec<PathBuf>,
    pub max_timeout_secs: u64,
    pub max_code_length: usize,
    pub allow_direct_code: bool,
    pub blocked_modules: HashSet<String>,
    pub blocked_operations: HashSet<String>,
}

Security configuration for Python execution

Fields

allowed_script_dirs: Vec<PathBuf>

Allowed script directories (whitelist)

max_timeout_secs: u64

Maximum execution timeout in seconds

max_code_length: usize

Maximum code length (bytes)

allow_direct_code: bool

Allow direct code execution (dangerous, should be false in production)

blocked_modules: HashSet<String>

Blocked Python modules (blacklist)

blocked_operations: HashSet<String>

Blocked Python operations (blacklist)

Implementations

impl SecurityConfig

pub fn strict() -> Self

Create a strict security configuration

pub fn permissive() -> Self

Create a permissive configuration (use with caution)

pub fn with_allowed_dir(self, dir: PathBuf) -> Self

Add an allowed script directory

pub fn is_path_allowed(&self, path: &Path) -> bool

Check if a path is allowed

pub fn validate_code(&self, code: &str) -> Result<()>

Validate Python code for dangerous operations

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.