Struct HttpsDataRefFetcher 

pub struct HttpsDataRefFetcher { /* private fields */ }

Default HTTPS-only fetcher.

Enforces:

• SsrfPolicy checks on every URL (HTTPS-only, IP-literal rejection, private-range blocking).
• Range-free GET with a hard byte cap (default 16 MiB).
• 30 s total timeout (matches RFC-ACDP-0006 §7.4 for registry RPCs).

Constructed via Self::new (default cap) or Self::with_max_bytes.

Implementations

impl HttpsDataRefFetcher

pub fn new() -> Self

Build a fetcher with the default 16 MiB cap and the default SsrfPolicy (HTTPS-only, no IP literals, no private ranges).

pub fn with_max_bytes(max_bytes: u64) -> Self

Build a fetcher with a custom response-size cap.

pub fn with_ssrf_policy(self, policy: SsrfPolicy) -> Self

Replace the SsrfPolicy (useful for tests).

SEC-02: this rebuilds the underlying reqwest::Client so the new policy is actually applied at the DNS layer. The HTTP client carries a SafeDnsResolver hook, so the resolver only takes effect on a client built with the policy — mutating ssrf_policy alone would leave the old DNS filter wired in.

Trait Implementations

impl DataRefFetcher for HttpsDataRefFetcher

async fn fetch(&self, location: &Location) -> Result<Vec<u8>, AcdpError>

Fetch raw bytes referenced by location. Implementations MAY reject Location::Structured with a clear error rather than implementing every scheme.

impl Default for HttpsDataRefFetcher

fn default() -> Self

Returns the “default value” for a type.