Security
Path Traversal in Rust File Servers and Safe Joins
A user-supplied filename like ../../etc/passwd escapes your upload directory. Reject components, canonicalize and verify the prefix, and see why Path::join with an absolute path is a trap.
3 min read