FastestMCP.ResourceSecurity (fastest_mcp v0.3.0)

Copy Markdown View Source

Lexical screening policy for decoded resource-template parameters.

This policy rejects values that would commonly escape a logical resource root. It deliberately does not inspect a filesystem, resolve symlinks, or recursively decode percent-encoded input.

Summary

Functions

Builds and validates a resource-security policy.

Types

t()

@type t() :: %FastestMCP.ResourceSecurity{
  exempt_params: MapSet.t(String.t()),
  reject_absolute_paths: boolean(),
  reject_null_bytes: boolean(),
  reject_path_traversal: boolean()
}

Functions

new(options \\ [])

Builds and validates a resource-security policy.