Struct multer::Constraints

source ·
pub struct Constraints { /* private fields */ }
Expand description

Represents some rules to be applied on the stream and field’s content size to prevent DoS attacks.

It’s recommended to add some rules on field (specially text field) size to avoid potential DoS attacks from attackers running the server out of memory. This type provides some API to apply constraints on very granular level to make multipart/form-data safe. By default, it does not apply any constraint.

Examples

use multer::{Multipart, Constraints, SizeLimit};

// Create some constraints to be applied to the fields to prevent DoS attack.
let constraints = Constraints::new()
     // We only accept `my_text_field` and `my_file_field` fields,
     // For any unknown field, we will throw an error.
     .allowed_fields(vec!["my_text_field", "my_file_field"])
     .size_limit(
         SizeLimit::new()
             // Set 15mb as size limit for the whole stream body.
             .whole_stream(15 * 1024 * 1024)
             // Set 10mb as size limit for all fields.
             .per_field(10 * 1024 * 1024)
             // Set 30kb as size limit for our text field only.
             .for_field("my_text_field", 30 * 1024),
     );

// Create a `Multipart` instance from a stream and the constraints.
let mut multipart = Multipart::with_constraints(some_stream, "X-BOUNDARY", constraints);

while let Some(field) = multipart.next_field().await.unwrap() {
    let content = field.text().await.unwrap();
    assert_eq!(content, "abcd");
}

Implementations§

source§

impl Constraints

source

pub fn new() -> Constraints

Creates a set of rules with default behaviour.

source

pub fn size_limit(self, size_limit: SizeLimit) -> Constraints

Applies rules on field’s content length.

source

pub fn allowed_fields<N: Into<String>>( self, allowed_fields: Vec<N> ) -> Constraints

Specify which fields should be allowed, for any unknown field, the next_field will throw an error.

Trait Implementations§

source§

impl Debug for Constraints

source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
source§

impl Default for Constraints

source§

fn default() -> Constraints

Returns the “default value” for a type. Read more

Auto Trait Implementations§

Blanket Implementations§

source§

impl<T> Any for Twhere T: 'static + ?Sized,

source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
source§

impl<T> Borrow<T> for Twhere T: ?Sized,

source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
source§

impl<T> BorrowMut<T> for Twhere T: ?Sized,

source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
source§

impl<T> From<T> for T

source§

fn from(t: T) -> T

Returns the argument unchanged.

source§

impl<T> Instrument for T

source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
source§

impl<T, U> Into<U> for Twhere U: From<T>,

source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

source§

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

§

type Error = Infallible

The type returned in the event of a conversion error.
source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
source§

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
source§

impl<T> WithSubscriber for T

source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more