Struct DomainFilter 

#[non_exhaustive]
pub struct DomainFilter {
    pub allowlist: Vec<String>,
    pub denylist: Vec<String>,
    pub block_private_ips: bool,
}

Domain allowlist/denylist with built-in SSRF protection.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

allowlist: Vec<String>

denylist: Vec<String>

block_private_ips: bool

Implementations

impl DomainFilter

pub fn blocking_private_ips() -> Self

Construct a filter that preserves open-domain access while blocking private, loopback, link-local, and otherwise non-routable IP ranges.

pub fn is_allowed(&self, url: &Url) -> Result<(), DomainFilterError>

Check whether the given URL is permitted by the filter.

Steps:

1. Scheme must be http or https.
2. Host must be extractable.
3. If the allowlist is non-empty the host must appear in it.
4. The host must not appear in the denylist.
5. If block_private_ips is enabled, DNS-resolved addresses are checked against private/loopback/link-local ranges (SSRF protection).

Trait Implementations

impl Clone for DomainFilter

fn clone(&self) -> DomainFilter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DomainFilter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DomainFilter

fn default() -> DomainFilter

Returns the “default value” for a type.