mapsslug

Overview ¶

Package mapsslug owns the namespaced slug grammar for offline-map downloads. Both pkg/webapi and pkg/mapscache import this package, so the regex, length cap, and forbidden-country list live in exactly one place.

Grammar:

state/<state-slug>
country/<iso2>           (iso2 != cn|ru)
province/<iso2>/<slug>   (iso2 != cn|ru)

state-slug and province-slug: ^[a-z][a-z0-9-]{0,49}$ iso2: ^[a-z]{2}$

The grammar is deliberately strict so an attacker cannot reach R2 or the local cache filesystem with a path-traversal payload. Catalog membership is checked separately against the live catalog.