Struct SecureRedirectPolicy 

pub struct SecureRedirectPolicy { /* private fields */ }

A security-hardened redirect policy

Implements tower_http::follow_redirect::policy::Policy with configurable security controls.

Security Features

1. Same-origin enforcement: By default, only follows redirects to the same host
2. Header stripping: Removes Authorization, Cookie on cross-origin redirects
3. Downgrade protection: Blocks HTTPS → HTTP redirects
4. Host allow-list: Configurable list of trusted redirect targets

Example

use modkit_http::{SecureRedirectPolicy, RedirectConfig};

let policy = SecureRedirectPolicy::new(RedirectConfig::default());

Implementations

impl SecureRedirectPolicy

pub fn new(config: RedirectConfig) -> Self

Create a new secure redirect policy with the given configuration

Trait Implementations

impl Clone for SecureRedirectPolicy

fn clone(&self) -> SecureRedirectPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecureRedirectPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<B: Clone, E> Policy<B, E> for SecureRedirectPolicy

fn redirect(&mut self, attempt: &Attempt<'_>) -> Result<Action, E>

Invoked when the service received a response with a redirection status code (3xx).

fn on_request(&mut self, request: &mut Request<B>)

Invoked right before the service makes a request, regardless of whether it is redirected or not.

fn clone_body(&self, body: &B) -> Option<B>

Try to clone a request body before the service makes a redirected request.