Documentation
¶
Overview ¶
Package secval provides JSON security validation: dangerous key detection and nesting depth limits. It has NO cross-module dependencies — errors are module-local sentinel types.
Do not use secval on file uploads or streaming endpoints. It parses the entire input into memory. Enforce body size limits (e.g., MaxBytesReader at 1-2MB) BEFORE passing data to secval.
Index ¶
Constants ¶
const MaxNestingDepth = 20
MaxNestingDepth is the maximum allowed depth for nested structures.
Variables ¶
var ( ErrDangerousKey = errors.New("secval: dangerous key detected") ErrNestingDepth = errors.New("secval: nesting depth exceeded") ErrInvalidJSON = errors.New("secval: invalid JSON") )
Sentinel errors — module-local, NOT from the chassis errors package.
var ErrInvalidIdentifier = errors.New("secval: invalid SQL identifier")
Functions ¶
func RedactSecrets ¶
RedactSecrets replaces secret values in a string with [REDACTED].
func SafeFilename ¶
SafeFilename removes path separators, null bytes, and control characters.
func SafeFilenameURL ¶
SafeFilenameURL returns a URL-safe filename.
func ValidateIdentifier ¶
ValidateIdentifier checks that s is a safe SQL identifier.
func ValidateJSON ¶
ValidateJSON parses data as JSON and scans it for dangerous keys and excessive nesting. Returns nil on success, or an error wrapping one of the sentinel errors (ErrDangerousKey, ErrNestingDepth, ErrInvalidJSON).
Types ¶
This section is empty.
Source Files