Struct NetworkPolicy 

pub struct NetworkPolicy {
    pub enabled: bool,
    pub allowed_url_prefixes: Vec<String>,
    pub allowed_methods: HashSet<String>,
    pub max_redirects: usize,
    pub max_response_size: usize,
    pub timeout: Duration,
}

Policy controlling network access for commands like curl.

Disabled by default — scripts have no network access unless the embedder explicitly enables it and configures an allow-list.

Fields

enabled: bool

allowed_url_prefixes: Vec<String>

allowed_methods: HashSet<String>

max_redirects: usize

max_response_size: usize

timeout: Duration

Implementations

impl NetworkPolicy

pub fn validate_url(&self, url: &str) -> Result<(), String>

Validate that url matches at least one entry in allowed_url_prefixes.

The raw URL is first parsed and re-serialized via url::Url to normalize it (resolve default ports, percent-encoding, etc.), and then each allowed prefix is checked with a simple starts_with. Prefixes are also normalized via url::Url when possible to prevent subdomain confusion attacks (e.g. a prefix of "https://api.example.com" without a trailing slash would otherwise match "https://api.example.com.evil.com/").

pub fn validate_method(&self, method: &str) -> Result<(), String>

Validate that method is in the set of allowed HTTP methods.

Trait Implementations

impl Clone for NetworkPolicy

fn clone(&self) -> NetworkPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetworkPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NetworkPolicy

fn default() -> Self

Returns the “default value” for a type.