Struct ValidatedUrl 

pub struct ValidatedUrl {
    pub url: Url,
    pub addresses: Vec<SocketAddr>,
}

Available on crate feature web only.

A URL that has passed SSRF validation, together with the exact IP addresses it resolved to.

The caller must connect to one of ValidatedUrl::addresses (e.g. by pinning them via reqwest::ClientBuilder::resolve_to_addrs) rather than re-resolving the host. Re-resolving opens a DNS-rebinding TOCTOU hole: the attacker-controlled record can pass validation here and then rebind to a blocked address (169.254.169.254, 127.0.0.1, …) before the connection is made.

Fields

url: Url

The validated URL.

addresses: Vec<SocketAddr>

The vetted socket addresses the host resolved to. Pin these for the actual request so the connection targets exactly what was validated.

Trait Implementations

impl Clone for ValidatedUrl

fn clone(&self) -> ValidatedUrl

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ValidatedUrl

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.