Module guard 

Request guards: two separate checks for two separate attacks.

The Host check stops a DNS-rebinding site from reading the remote through the loopback listener. Binding to 127.0.0.1 does nothing about that on its own, and leaving it out is the hole rclone’s serve http has.

The path check keeps a request inside its alias base.

Enums

Target

Which shape of request arrived.

Functions

classify

Decide what a request is, or refuse it.

resolve

Resolve a request path against an alias base, refusing anything that escapes.