Module payload_strategies 

Native, built-in crate::payload_strategy::PayloadStrategy

Runtime scope

• Build: always/default.
• Execution: Surface B (concrete planner-selected payload strategies).
• Default termivar scan: no.
• Support: implemented and tested.

See docs/internals/runtime-map.md. implementations and their registry.

The contract module crate::payload_strategy defines the deterministic, bounded, redacted boundary a planner-selected strategy must honor. This module holds the concrete implementations of that contract and the builder that registers the strategies a standard profile may resolve.

Implementations here are pure functions of (role, seed, limits). Adding a strategy requires repeat and concurrency conformance tests before it is registered by standard_payload_strategies.

Re-exports

pub use api_authorization_context_pair::ApiAuthorizationContextPairStrategy;

pub use api_authorization_context_pair::API_AUTHORIZATION_CONTEXT_PAIR_HEADER_NAME;

pub use api_authorization_context_pair::API_AUTHORIZATION_CONTEXT_PAIR_ID;

pub use api_authorization_context_pair::API_AUTHORIZATION_CONTEXT_PAIR_REVISION;

pub use cors_origin_pair::CorsOriginPairStrategy;

pub use cors_origin_pair::CORS_ORIGIN_PAIR_HEADER_NAME;

pub use cors_origin_pair::CORS_ORIGIN_PAIR_ID;

pub use cors_origin_pair::CORS_ORIGIN_PAIR_REVISION;

pub use encoding::encode_into_artifact;

pub use encoding::hex_encode;

pub use encoding::percent_encode;

pub use encoding::PayloadEncoding;

pub use external_url_query_pair::ExternalUrlQueryPairStrategy;

pub use external_url_query_pair::EXTERNAL_URL_QUERY_PAIR_ID;

pub use external_url_query_pair::EXTERNAL_URL_QUERY_PAIR_REVISION;

pub use http_header_control_pair::HttpHeaderControlPairStrategy;

pub use http_header_control_pair::HTTP_HEADER_CONTROL_PAIR_HEADER_NAME;

pub use http_header_control_pair::HTTP_HEADER_CONTROL_PAIR_ID;

pub use http_header_control_pair::HTTP_HEADER_CONTROL_PAIR_REVISION;

pub use reflection_marker_query_pair::ReflectionMarkerQueryPairStrategy;

pub use reflection_marker_query_pair::REFLECTION_MARKER_QUERY_PAIR_ID;

pub use reflection_marker_query_pair::REFLECTION_MARKER_QUERY_PAIR_REVISION;

pub use sql_quote_balance_query_pair::SqlQuoteBalanceQueryPairStrategy;

pub use sql_quote_balance_query_pair::SQL_QUOTE_BALANCE_QUERY_PAIR_ID;

pub use sql_quote_balance_query_pair::SQL_QUOTE_BALANCE_QUERY_PAIR_REVISION;

pub use ssti_arithmetic_expression_pair::SstiArithmeticExpressionPairStrategy;

pub use ssti_arithmetic_expression_pair::SSTI_ARITHMETIC_EXPRESSION_PAIR_ID;

pub use ssti_arithmetic_expression_pair::SSTI_ARITHMETIC_EXPRESSION_PAIR_REVISION;

pub use template_jinja_uppercase_expression_pair::TemplateJinjaUppercaseExpressionPairStrategy;

pub use template_jinja_uppercase_expression_pair::TEMPLATE_JINJA_UPPERCASE_EXPRESSION_PAIR_ID;

pub use template_jinja_uppercase_expression_pair::TEMPLATE_JINJA_UPPERCASE_EXPRESSION_PAIR_REVISION;

pub use xss_attribute_boundary_query_pair::XssAttributeBoundaryQueryPairStrategy;

pub use xss_attribute_boundary_query_pair::XSS_ATTRIBUTE_BOUNDARY_QUERY_PAIR_ID;

pub use xss_attribute_boundary_query_pair::XSS_ATTRIBUTE_BOUNDARY_QUERY_PAIR_REVISION;

pub use xss_javascript_lexical_boundary_query_pair::XssJavascriptLexicalBoundaryQueryPairStrategy;

pub use xss_javascript_lexical_boundary_query_pair::XSS_JAVASCRIPT_LEXICAL_BOUNDARY_QUERY_PAIR_ID;

pub use xss_javascript_lexical_boundary_query_pair::XSS_JAVASCRIPT_LEXICAL_BOUNDARY_QUERY_PAIR_REVISION;

pub use xss_structural_query_pair::XssStructuralQueryPairStrategy;

pub use xss_structural_query_pair::XSS_STRUCTURAL_QUERY_PAIR_ID;

pub use xss_structural_query_pair::XSS_STRUCTURAL_QUERY_PAIR_REVISION;

Modules

api_authorization_context_pair

Second built-in payload strategy: api.authorization.context-pair@1.

cors_origin_pair

Native matched CORS-origin payload strategy.

encoding

Pure, bounded byte-encoding helpers.

external_url_query_pair

Native matched external-URL query payload strategy.

http_header_control_pair

First built-in payload strategy: http.header.control-pair@1.

reflection_marker_query_pair

Bounded scanner-owned reflection marker pair.

sql_quote_balance_query_pair

Bounded, non-destructive SQL quote-balance review mutation.

ssti_arithmetic_expression_pair

Bounded structural SSTI arithmetic probes.

template_jinja_uppercase_expression_pair

Bounded Jinja-compatible uppercase-filter expression probes.

xss_attribute_boundary_query_pair

Non-executing quote-aware HTML attribute-boundary probe pair.

xss_javascript_lexical_boundary_query_pair

Non-executing JavaScript lexical-boundary probe pair.

xss_structural_query_pair

Non-executing context-specific structural XSS probe pair.

Functions

standard_payload_strategies

Builds the registry of payload strategies a standard profile may resolve.