vtcode_core/tools/web_fetch/
domains.rs

1//! Security domain constants for web_fetch tool
2//!
3//! Contains built-in blocklists for sensitive domains and patterns,
4//! plus malicious indicators to prevent access to dangerous URLs.
5
6/// Built-in blocklist domains (used in restricted mode)
7pub const BUILTIN_BLOCKED_DOMAINS: &[&str] = &[
8    // Banking & Financial
9    "paypal.com",
10    "stripe.com",
11    "square.com",
12    "interac.ca",
13    "wire.com",
14    // Authentication & Identity
15    "github.com/login",
16    "gitlab.com/users/login",
17    "okta.com",
18    "auth0.com",
19    "accounts.google.com",
20    "login.microsoftonline.com",
21    "login.apple.com",
22    // Email providers
23    "mail.google.com",
24    "outlook.live.com",
25    "icloud.com/mail",
26    // Personal/Private services
27    "myfitnesspal.com",
28    "health.apple.com",
29    "health.google.com",
30    // VPN & Proxy services
31    "expressvpn.com",
32    "nordvpn.com",
33    // Medical & Health records
34    "healthvault.com",
35    "epic.com",
36    "cerner.com",
37    // Legal documents
38    "docusign.com",
39    "adobe.com/sign",
40];
41
42/// Built-in blocked patterns (used in restricted mode)
43pub const BUILTIN_BLOCKED_PATTERNS: &[&str] = &[
44    "password=",
45    "token=",
46    "api_key=",
47    "secret=",
48    "auth=",
49    "session=",
50    "cookie=",
51    "oauth",
52    "bearer%20",
53    "x-auth",
54    "authorization:",
55    "/admin",
56    "/private",
57    "/internal",
58    "/secret",
59];
60
61/// Common malware delivery and phishing patterns
62pub const MALICIOUS_PATTERNS: &[&str] = &[
63    // Obfuscation and evasion
64    ".zip\"",
65    ".exe\"",
66    ".scr\"",
67    ".bat\"",
68    ".cmd\"",
69    ".vbs\"",
70    ".ps1\"",
71    // Domain confusion (typosquatting indicators)
72    "g00gle",
73    "g0ogle",
74    "gooogle",
75    "micr0soft",
76    "micro$oft",
77    "amaz0n",
78    "facebk",
79    "faceb00k",
80    // Suspicious subdomains
81    "admin.",
82    "backup.",
83    "dev.",
84    "test.",
85    "temp.",
86    "tmp.",
87    // Known malware hosting patterns
88    "bit.ly/",
89    "short.link/",
90    "tinyurl.com/",
91    "goo.gl/",
92];
vtcode_core/tools/web_fetch/domains.rs

vtcode_core/tools/web_fetch/
domains.rs
