Struct UrlValidator 

pub struct UrlValidator { /* private fields */ }

URL validator with SSRF protection.

Validates URLs before fetching to prevent Server-Side Request Forgery attacks. By default, blocks access to:

• Localhost and loopback addresses
• Private IP ranges (10.x, 172.16-31.x, 192.168.x)
• Cloud metadata endpoints (AWS, GCP)

Example

use agent_sdk::web::UrlValidator;

let validator = UrlValidator::new();
assert!(validator.validate("https://example.com").is_ok());
assert!(validator.validate("http://localhost").is_err());

Implementations

impl UrlValidator

pub fn new() -> Self

Create a new URL validator with default security settings.

pub fn with_allowed_domains(self, domains: Vec<String>) -> Self

Only allow URLs from specific domains.

pub fn with_blocked_hosts(self, hosts: Vec<String>) -> Self

Add additional blocked hosts.

pub const fn with_allow_private_ips(self, allow: bool) -> Self

Allow private IP ranges (dangerous - use with caution).

pub const fn with_max_redirects(self, max: usize) -> Self

Set maximum redirects.

pub const fn with_allow_http(self) -> Self

Allow HTTP URLs (default requires HTTPS).

pub const fn max_redirects(&self) -> usize

Get the maximum number of redirects allowed.

pub fn validate(&self, url_str: &str) -> Result<Url>

Validate a URL string.

Errors

Returns an error if:

• The URL is malformed
• The scheme is not HTTP or HTTPS
• HTTPS is required but HTTP is used
• The host is blocked
• The host resolves to a private/blocked IP
• The domain is not in the allowed list

Trait Implementations

impl Clone for UrlValidator

fn clone(&self) -> UrlValidator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UrlValidator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for UrlValidator

fn default() -> Self

Returns the “default value” for a type.