Struct HostPolicy 

pub struct HostPolicy {
    pub allowed: Vec<String>,
    pub trust_proxy: bool,
}

Host allow-list enforced by DotfileGuard (security review M1).

A request whose effective host (the plain Host header, or the forwarding headers behind trust_proxy) is not on the list is refused with 421 Misdirected Request before any handler runs, so a client cannot address the server under a name it does not serve.

Fields

allowed: Vec<String>

Permitted hosts (host or host:port, case-insensitive).

trust_proxy: bool

Honour X-Forwarded-Host / Forwarded when computing the host.