Security on rustbiteshttps://www.rustbites.com/tags/security/Recent content in Security on rustbitesHugoenMon, 20 Jul 2026 22:04:45 +0200264. Path::join — One Absolute Path and Your Base Directory Is Gonehttps://www.rustbites.com/posts/bite-264/Fri, 17 Jul 2026 09:00:00 +0100https://www.rustbites.com/posts/bite-264/<p><code>base.join(user_input)</code> looks like it appends. But if the input starts with <code>/</code>, <code>join</code> silently throws your base away and returns the input alone.</p>