[pitboss] phase 17: Track L.15 — Gin / Echo / Fiber / Chi adapters + Axum / Actix / Rocket / Warp adapters

tests/dynamic_fixtures/rust_frameworks/warp/benign.rs

@@ -0,0 +1,24 @@
+//! Phase 17 (Track L.15) — warp benign control fixture.
+
+use std::process::Command;
+use serde::Deserialize;
+use warp::Filter;
+
+#[derive(Deserialize)]
+pub struct RunQuery {
+    pub cmd: String,
+}
+
+pub fn run(q: RunQuery) -> &'static str {
+    let allow = ["ls", "ps"];
+    if allow.contains(&q.cmd.as_str()) {
+        let _ = Command::new(&q.cmd).status();
+    }
+    "ok"
+}
+
+pub fn build() -> impl Filter<Extract = (&'static str,), Error = warp::Rejection> + Clone {
+    warp::path!("run")
+        .and(warp::query::<RunQuery>())
+        .map(run)
+}

tests/dynamic_fixtures/rust_frameworks/warp/vuln.rs

@@ -0,0 +1,26 @@
+//! Phase 17 (Track L.15) — warp CMDI vuln fixture.
+//!
+//! The /run filter forwards a query parameter straight into
+//! `std::process::Command`.  Adapter binding:
+//! `warp::path!("run").and(warp::query::<RunQuery>()).map(run)` with
+//! `cmd` arriving via warp's typed query.
+
+use std::process::Command;
+use serde::Deserialize;
+use warp::Filter;
+
+#[derive(Deserialize)]
+pub struct RunQuery {
+    pub cmd: String,
+}
+
+pub fn run(q: RunQuery) -> &'static str {
+    let _ = Command::new("sh").arg("-c").arg(&q.cmd).status();
+    "ok"
+}
+
+pub fn build() -> impl Filter<Extract = (&'static str,), Error = warp::Rejection> + Clone {
+    warp::path!("run")
+        .and(warp::query::<RunQuery>())
+        .map(run)
+}