Struct SecurityConfig 

pub struct SecurityConfig {
    pub allow_all_env_vars: bool,
    pub allow_http_profiles: bool,
}

Environment variable substitution allowlist and plain-HTTP profile fetching.

Fields

allow_all_env_vars: bool

Allow all environment variables in config ${VAR} substitution.

When false (default), only a safe allowlist of environment variables (HOME, USER, SHELL, XDG_, PAR_TERM_, LC_*, etc.) can be substituted. This prevents shared or downloaded config files from exfiltrating sensitive environment variables such as API keys or tokens.

Set to true to restore the unrestricted pre-0.24 behaviour.

allow_http_profiles: bool

Allow dynamic profile sources to be fetched over plain HTTP (not HTTPS).

When false (the default), any dynamic_profile_sources entry whose URL uses the http:// scheme will be refused with an error at fetch time. This prevents a network-level attacker from injecting malicious profiles via a man-in-the-middle attack on an untrusted network.

Set to true only if you must fetch profiles from a server that does not support HTTPS (e.g., an internal dev server without TLS). A warning will still be logged in that case.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> SecurityConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<SecurityConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.