Struct UrlPolicy 

pub struct UrlPolicy {
    pub enabled: bool,
    pub allow_private: bool,
    pub allowed_domains: HashSet<String>,
    pub blocked_domains: HashSet<String>,
}

Runtime URL safety policy for SSRF protection.

Controls which URLs the web fetch tool is allowed to access. Constructed from super::config::UrlPolicyConfig at startup.

Note: the full URL validation logic (DNS resolution, CIDR checks) lives in clawft-tools::url_safety::validate_url which depends on external crates. This struct is the shared data container.

Fields

enabled: bool

Whether URL safety checks are active.

allow_private: bool

Whether to allow requests to private/reserved IP ranges.

allowed_domains: HashSet<String>

Domains that bypass all safety checks.

blocked_domains: HashSet<String>

Domains that are always blocked.

Implementations

impl UrlPolicy

pub fn new( enabled: bool, allow_private: bool, allowed_domains: HashSet<String>, blocked_domains: HashSet<String>, ) -> Self

Create a new policy with the given settings.

pub fn permissive() -> Self

Create a permissive policy that disables all checks.

Intended for testing and development only.

Trait Implementations

impl Clone for UrlPolicy

fn clone(&self) -> UrlPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UrlPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for UrlPolicy

fn default() -> Self

Returns the “default value” for a type.