selfware 0.6.2

Your personal AI workshop — software you own, software that lasts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128

//! Shared network-policy helpers for URL / IP validation.
//!
//! Both `http.rs` (HTTP request tool) and `page_controller.rs` (Playwright
//! tool) need to decide whether a target URL points at a private/internal
//! network address and whether to allow or block it. This module is the
//! single place where that logic lives.

use crate::config::is_local_endpoint;
use crate::safety::is_private_or_internal;
use anyhow::Result;
use std::net::IpAddr;

// ============================================================================
// IP helpers
// ============================================================================

/// Returns `true` when `ip` belongs to a private, internal, link-local,
/// loopback, or otherwise non-public range.
///
/// This is a thin wrapper around [`crate::safety::is_private_or_internal`]
/// so that callers inside `tools/` don't need to reach into the safety crate
/// directly.
pub fn is_private_or_internal_ip(ip: &IpAddr) -> bool {
    is_private_or_internal(*ip)
}

/// Returns `true` when `host` is a known-private hostname (e.g. `localhost`)
/// or parses to a private/internal IP address.
pub fn is_private_network_host(host: &str) -> bool {
    if host == "localhost" || host.ends_with(".localhost") {
        return true;
    }
    let bare_host = if host.starts_with('[') && host.ends_with(']') {
        let inner = &host[1..host.len() - 1];
        // Basic IPv6 validation: must contain a colon and only valid hex/colon chars
        if !inner.contains(':')
            || !inner
                .chars()
                .all(|c| c.is_ascii_hexdigit() || c == ':' || c == '.')
        {
            return false;
        }
        inner
    } else {
        host
    };
    if let Ok(ip) = bare_host.parse::<IpAddr>() {
        return is_private_or_internal_ip(&ip);
    }
    false
}

/// Returns `true` for the handful of loopback/unspecified addresses that are
/// considered "trusted local" (i.e. traffic stays on the machine).
pub(crate) fn is_trusted_local_network_host(host: &str) -> bool {
    let bare_host = if host.starts_with('[') && host.ends_with(']') {
        let inner = &host[1..host.len() - 1];
        if !inner.contains(':')
            || !inner
                .chars()
                .all(|c| c.is_ascii_hexdigit() || c == ':' || c == '.')
        {
            return false;
        }
        inner
    } else {
        host
    };
    matches!(bare_host, "localhost" | "127.0.0.1" | "::1" | "0.0.0.0")
        || bare_host.ends_with(".localhost")
}

// ============================================================================
// Policy struct + validation
// ============================================================================

/// Describes what kind of network targets are permitted for a request.
#[derive(Debug, Clone, Copy)]
pub struct NetworkPolicy {
    pub allow_localhost: bool,
    pub allow_private: bool,
}

/// Validate a parsed URL against the network policy rules that are shared
/// between the HTTP-request tool and the page-controller tool.
///
/// * Only `http` and `https` schemes are accepted (callers that also support
///   `file://` should handle that separately before calling this function).
/// * Localhost / loopback targets are always allowed (via `is_local_endpoint`
///   or `is_trusted_local_network_host`).
/// * Other private/internal IPs are blocked unless `allow_private` is `true`.
pub fn validate_url_target(url: &url::Url, allow_private: bool) -> Result<NetworkPolicy> {
    if url.scheme() != "http" && url.scheme() != "https" {
        anyhow::bail!("Only HTTP and HTTPS URLs are allowed");
    }

    let allow_localhost = is_local_endpoint(url.as_str())
        || url.host_str().is_some_and(is_trusted_local_network_host);

    if let Some(host) = url.host_str() {
        if let Ok(ip) = host
            .trim_start_matches('[')
            .trim_end_matches(']')
            .parse::<IpAddr>()
        {
            if is_private_or_internal_ip(&ip) && !(allow_private || allow_localhost) {
                anyhow::bail!(
                    "Blocked request to private/internal network address: {}. \
                     Set SELFWARE_ALLOW_PRIVATE_NETWORK=1 to allow.",
                    host
                );
            }
        }
    }

    Ok(NetworkPolicy {
        allow_localhost,
        allow_private,
    })
}

// ============================================================================
// Tests
// ============================================================================

#[cfg(test)]
#[path = "../../tests/unit/tools/net_policy/net_policy_test.rs"]
mod tests;