Struct HttpAllowList 

pub struct HttpAllowList { /* private fields */ }

Allow only requests to hosts matching the given patterns.

Matching is performed against the host portion of the URL only. The URL is parsed to extract the host (stripping scheme, userinfo, port, path, query, and fragment) before matching.

Patterns are matched as exact or suffix of the host — e.g. "example.com" matches https://example.com/path and https://api.example.com/path but does not match https://notexample.com/path or https://evil.com/?ref=example.com.

Security

Previous versions matched against the full URL string, which allowed bypass via query parameters or path segments. This implementation extracts the host and matches only against it.

use mlua_batteries::policy::HttpAllowList;

let policy = HttpAllowList::new(["api.example.com", "httpbin.org"]);

Implementations

impl HttpAllowList

pub fn new<I, S>(hosts: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Create an allow-list from host patterns.

Trait Implementations

impl Debug for HttpAllowList

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl HttpPolicy for HttpAllowList

fn check_url(&self, url: &str, method: &str) -> Result<(), PolicyError>

Validate url for method (e.g. “GET”, “POST”).

fn policy_name(&self) -> &'static str

Human-readable name for this policy, used in Debug output.