pub fn validate_cloud_path(cloud_path: &str) -> Result<(), PathTokenError>Expand description
Reject an untrusted cloud_path (the consumer’s readable object key under the
plain scheme, e.g. "Artist - Album/cover.jpg") that could escape its
namespace prefix in the bucket. Unlike a path token, an interior / is
legitimate — the readable path is nested — but every segment still has to be
a canonical path token. Empty, ., .., colon/platform-prefix, backslash,
and NUL forms are refused before an object key is built. The cloud_path
never feeds a local file path, only the cloud object key, so this guards the
keyspace, not the disk.