Struct NetworkPolicy 

pub struct NetworkPolicy {
    pub allow_hosts: Vec<String>,
    pub allow_classes: Vec<AddressClass>,
    pub allowed_schemes: Vec<String>,
    pub allow_request: Option<AllowCallback>,
    pub hard_block_link_local: bool,
    pub unrestricted: bool,
    pub resolver: Option<Resolver>,
    /* private fields */
}

Typed SSRF/host policy. See the module docs for defaults.

Fields

allow_hosts: Vec<String>

Hosts (exact, case-insensitive) allowed even when their address class is blocked.

allow_classes: Vec<AddressClass>

Address classes allowed for every host (e.g. Loopback for local dev servers).

allowed_schemes: Vec<String>

Lowercase schemes that may be requested. Default ["http", "https"].

allow_request: Option<AllowCallback>

Called for every checked request; see PolicyDecision.

hard_block_link_local: bool

Link-local and metadata destinations cannot be allowed (default true).

unrestricted: bool

Disable every check (trusted callers only).

resolver: Option<Resolver>

Replaces the system resolver (offline tests, pinned DNS, split-horizon setups).

Implementations

impl NetworkPolicy

pub fn unrestricted() -> Self

Policy with every check off.

pub fn allow_host(self, host: impl Into<String>) -> Self

pub fn allow_class(self, class: AddressClass) -> Self

pub fn allow_scheme(self, scheme: impl Into<String>) -> Self

pub fn hard_block_link_local(self, on: bool) -> Self

pub fn with_resolver( self, f: impl Fn(&str) -> Vec<IpAddr> + Send + Sync + 'static, ) -> Self

pub fn allow_with<D: Into<PolicyDecision>>( self, f: impl Fn(&BrowserRequest) -> D + Send + Sync + 'static, ) -> Self

Per-request callback. Returning bool works too: true allows, false defers to the defaults.

pub async fn check( &self, url: &str, resource_type: &str, ) -> Result<(), BlockReason>

Ok(()) when the request may proceed, otherwise why it is blocked.

Trait Implementations

impl Clone for NetworkPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetworkPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NetworkPolicy

fn default() -> Self

Returns the “default value” for a type.