pathsafe

Documentation

Index

• func ContainsNUL(p string) bool
• func IsWindowsDrivePath(p string) bool
• func SafeJoin(root string, rel string) (string, error)
• func ValidatePathHasNoSymlinkComponents(p string) error
• func ValidateSafeFileName(name string) error
• func ValidateStoredRelativePath(p string) error

Functions

func ContainsNUL

func ContainsNUL(p string) bool

ContainsNUL reports whether the input contains a NUL byte.

func IsWindowsDrivePath

func IsWindowsDrivePath(p string) bool

IsWindowsDrivePath reports whether p starts with a Windows drive prefix. Examples: C:\\tmp\\a.txt, D:/tmp/a.txt, E:

func SafeJoin

func SafeJoin(root string, rel string) (string, error)

SafeJoin validates rel and joins it under a trusted root with containment checks.

func ValidatePathHasNoSymlinkComponents

func ValidatePathHasNoSymlinkComponents(p string) error

ValidatePathHasNoSymlinkComponents rejects paths that traverse existing symlink components. Missing suffix components are allowed.

func ValidateSafeFileName

func ValidateSafeFileName(name string) error

ValidateSafeFileName validates an opaque filename intended to be joined under a trusted directory.

func ValidateStoredRelativePath

func ValidateStoredRelativePath(p string) error

ValidateStoredRelativePath validates a stored/snapshot-style relative path.