Skip to main content

decide_tainted

openmoat_proxy

Function decide_tainted 

Source 
pub fn decide_tainted(
    policy: &CompiledPolicy<'_>,
    host: &str,
    port: u16,
    taint: &Taint,
) -> Option<Decision>
Expand description

The refusal for a request to host:port from a session with taint, if any (ADR-027). The core’s taint rules decide (POLICY.md §4.1): after the session read secret material, network to every host but that secret’s own asks. The proxy cannot ask, so that ask is refused. Untrusted content alone changes nothing here: its taint protects writes.