Safe Path

A library to safely handle filesystem paths, typically for container runtimes.

There are often path related attacks, such as symlink based attacks, time-of-check to time-of-use (TOCTOU) attacks. The safe-path crate provides several functions and utility structures to protect against path resolution related attacks.

Support

Operating Systems:

• Linux

Reference

• filepath-securejoin: secure_join() written in Go.
• CVE-2021-30465: symlink related TOCTOU flaw in runC.

License

This code is licensed under Apache-2.0.