From 2886662e18e5500e032003745c4cf38ed4c2771d Mon Sep 17 00:00:00 2001
From: Zhaofeng Li <hello@zhaofeng.li>
Date: Wed, 10 Feb 2021 18:17:49 -0800
Subject: [PATCH] nix: Key names can contain one path component only

Well, I changed my mind and this should be cleaner.
---
 src/nix/mod.rs | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/src/nix/mod.rs b/src/nix/mod.rs
index 20d110d..1169ade 100644
--- a/src/nix/mod.rs
+++ b/src/nix/mod.rs
@@ -1,6 +1,6 @@
 use std::collections::HashMap;
 use std::convert::TryFrom;
-use std::path::{Component as PathComponent, Path};
+use std::path::Path;
 use std::process::Stdio;
 
 use async_trait::async_trait;
@@ -219,10 +219,8 @@ fn validate_keys(keys: &HashMap<String, Key>) -> Result<(), ValidationErrorType>
             return Err(ValidationErrorType::new("Secret key name cannot be absolute"));
         }
 
-        for component in path.components() {
-            if component == PathComponent::ParentDir {
-                return Err(ValidationErrorType::new("Secret key name cannot refer to parent directory"));
-            }
+        if path.components().collect::<Vec<_>>().len() != 1 {
+            return Err(ValidationErrorType::new("Secret key name cannot contain path separators"));
         }
     }
     Ok(())