core

func Contains ¶

func Contains(s, substr string) bool

Contains reports whether s contains substr.

func ExpandHomeDir ¶

func ExpandHomeDir(path string) string

ExpandHomeDir expands "~/" paths.

func GetDeniedDirectories ¶

func GetDeniedDirectories() []string

GetDeniedDirectories returns built-in denied directories.

func HashProxyConfig ¶

func HashProxyConfig(proxyConfig interface{}) string

HashProxyConfig creates a hash of proxy config for comparison using SHA-256

func IsDirAllowed ¶

func IsDirAllowed(dir string, allow, deny []string) bool

IsDirAllowed checks if a directory is allowed based on allow/deny lists.

func NoopOriginCheck ¶

func NoopOriginCheck(_ *http.Request) bool

NoopOriginCheck allows all origins, used by tests.

func PathHasPrefix ¶

func PathHasPrefix(path, prefix string) bool

PathHasPrefix checks prefix with platform-aware behavior.

func SetDefaultRuntimeState ¶

func SetDefaultRuntimeState(runtime *RuntimeState)

SetDefaultRuntimeState stores runtime state used by components that cannot receive deps directly.

func ValidateAndOpenPath ¶

func ValidateAndOpenPath(userPath string, cfg *config.SecurityConfig) (*os.File, string, error)

ValidateAndOpenPath validates a user-provided path and returns an open *os.File to the validated directory, along with its canonical path.

This is the TOCTOU-safe version of ValidateScanPath. By holding the file descriptor open, symlink swap attacks between validation and use are prevented. On Unix, inode verification detects symlink swap attacks between the pre-open stat and the post-open file handle. On Windows, pre-open identity is unavailable, so only post-open TOCTOU protection is provided (the open handle references the actual file object).

The caller MUST close the returned file when done:

f, path, err := core.ValidateAndOpenPath(req.Path, cfg)
if err != nil { ... }
defer f.Close()
// Use f.ReadDir() or path (file remains open, preventing swap)

func ValidateScanPath ¶

func ValidateScanPath(userPath string, cfg *config.SecurityConfig) (string, error)

ValidateScanPath validates and sanitizes user-provided paths for scanning. Returns the canonical path string. For TOCTOU-safe operations, use ValidateAndOpenPath.