Struct HostAllowlist 

pub struct HostAllowlist { /* private fields */ }

Host allowlist. Fail-closed: empty allowlist rejects everything.

Implementations

impl HostAllowlist

pub fn new() -> Self

Empty (fail-closed) allowlist.

pub fn add_exact_host(self, host: impl Into<String>) -> Self

Append an exact hostname rule (case-insensitive). IDN inputs are normalized to Punycode so a Cyrillic-look-alike domain cannot bypass an entry registered in Latin script (or vice versa).

pub fn add_subdomain_root(self, host: impl Into<String>) -> Self

Append a wildcard-subdomain rule. The leading *. is optional in the supplied string; both *.example.com and example.com are accepted as input and stored without the *. prefix for matching. Inputs are normalized to Punycode the same way as Self::add_exact_host.

pub fn add_exact_ip(self, ip: IpAddr) -> Self

Append an exact IP literal rule. Intended for narrow on-prem allowances; prefer allow_exact over this for hostnames.

pub fn len(&self) -> usize

Number of registered rules.

pub fn is_empty(&self) -> bool

Whether the allowlist has zero rules (rejects everything).

pub fn explicit_ips(&self) -> HashSet<IpAddr>

Borrow every IP registered via Self::add_exact_ip. Used by HttpFetchToolBuilder to seed the SSRF-safe DNS resolver’s explicit-allow set so on-prem private-IP allowances pass the connect-time block.

Trait Implementations

impl Clone for HostAllowlist

fn clone(&self) -> HostAllowlist

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HostAllowlist

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HostAllowlist

fn default() -> HostAllowlist

Returns the “default value” for a type.