Struct CorsConfig 

pub struct CorsConfig {
    pub allow_any: bool,
}

Cross-Origin Resource Sharing (CORS) configuration.

CORS is a browser-enforced mechanism; non-browser clients (curl, SDKs) ignore it entirely. shell-tunnel therefore emits no permissive CORS headers by default: this blocks a malicious web page from reading responses cross-origin and, because the JSON execute endpoints require a preflight, from issuing the request at all — with zero impact on the intended non-browser consumers.

Note: CORS does not defend against DNS-rebinding (the attacker’s host is rebound to 127.0.0.1, making the request same-origin); that requires Host-header validation and is tracked separately.

Fields

allow_any: bool

Allow any origin/method/header (restores the permissive Any behavior). Off by default; enable only for trusted browser-based UIs.

Trait Implementations

impl Clone for CorsConfig

fn clone(&self) -> CorsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CorsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CorsConfig

fn default() -> CorsConfig

Returns the “default value” for a type.