Struct SecurityConfig 

pub struct SecurityConfig {
    pub ssrf_allow_private: bool,
    pub ssrf_allowlist: Vec<String>,
    pub ssrf_denylist: Vec<String>,
    pub dotfile_allowlist: Vec<String>,
    pub acl_origin_enabled: bool,
}

Security primitives — SSRF, dotfiles, ACL origin.

Fields

ssrf_allow_private: bool

Allow outbound requests to RFC 1918 / loopback / link-local — JSS_SSRF_ALLOW_PRIVATE. Defaults off (production-safe).

ssrf_allowlist: Vec<String>

Explicit allowlist of hosts/CIDRs — JSS_SSRF_ALLOWLIST (comma-separated in env; JSON array in file).

ssrf_denylist: Vec<String>

Explicit denylist — JSS_SSRF_DENYLIST.

dotfile_allowlist: Vec<String>

Dotfile allowlist (e.g. .acl, .meta) — JSS_DOTFILE_ALLOWLIST.

acl_origin_enabled: bool

ACL-origin lockdown toggle — JSS_ACL_ORIGIN_ENABLED.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.