Struct NetworkResolver 

pub struct NetworkResolver { /* private fields */ }

HTTPS-fetching resolver. Hardened by default with multiple SSRF and amplification defenses; the constructor requires a host allowlist so there’s no convenient “any host” mode.

Defaults:

• HTTPS only (use [with_plaintext_http] to allow http://)
• Refuses URLs whose resolved IP is RFC 1918 / loopback / link-local (use [with_private_ips_allowed] to disable)
• 10-second per-request timeout
• 1 MB max response size
• 64 MB in-memory LRU cache (per resolver instance)

Implementations

impl NetworkResolver

pub fn new<I>(allowed_hosts: I) -> NetworkResolver

where I: IntoIterator<Item = String>,

Construct with the required host allowlist. Hosts are matched exactly (no wildcards) against the URL’s host component. All other settings get safe defaults; use the with_* builders to relax them.

pub fn with_plaintext_http(self) -> NetworkResolver

Allow http:// URLs (default: HTTPS-only). Almost always wrong; use only for testing or air-gapped networks where TLS isn’t available.

pub fn with_private_ips_allowed(self) -> NetworkResolver

Allow URLs whose resolved IP is RFC 1918 private, loopback, or link-local (default: refused for SSRF defense). Disable only if your allowed_hosts list already constrains to trusted internal hosts.

pub fn with_max_response_bytes(self, n: usize) -> NetworkResolver

pub fn with_timeout(self, d: Duration) -> NetworkResolver

pub fn with_cache_size(self, max_total_bytes: usize) -> NetworkResolver

Trait Implementations

impl Debug for NetworkResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl EntityResolver for NetworkResolver

fn resolve( &self, _public_id: Option<&str>, system_id: &str, _base_uri: Option<&str>, ) -> Result<Vec<u8>, ResolveError>

Resolve an external entity reference.