Struct SsrfProtector 

pub struct SsrfProtector { /* private fields */ }

The SSRF protection engine — validates URLs before they leave the ring.

Blocks requests to private IP ranges, dangerous schemes, and specific hostnames. Supports allow-listing for trusted internal hosts and custom regex-based blocking patterns.

Implementations

impl SsrfProtector

pub fn new() -> Self

Create a new protector with default blocked ranges and schemes.

pub fn allow_host(&mut self, host: &str)

Add a hostname to the allow-list (bypasses IP range checks).

pub fn add_blocked_pattern(&mut self, name: &str, pattern: &str)

Add a custom regex pattern to block.

pub fn add_blocked_range(&mut self, cidr: &str)

Add a custom CIDR range to block.

pub fn block_host(&mut self, host: &str)

Block an additional hostname.

pub fn set_dns_check(&mut self, enabled: bool)

Enable or disable DNS resolution checks.

pub fn validate_url(&self, url: &str) -> Result<(), SsrfViolation>

Validate a URL, returning Ok(()) if it is safe to request.

Trait Implementations

impl Clone for SsrfProtector

fn clone(&self) -> SsrfProtector

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SsrfProtector

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SsrfProtector

fn default() -> Self

Returns the “default value” for a type.