Documentation
¶
Overview ¶
Package scanexcl holds the admin-managed scan-exclusion store: known-good SHA-256 content hashes and hostnames that bypass all body scanning. It is a self-contained leaf (stdlib + the hostutil seam) extracted from the flat package main per ADR-0002.
It is designed for an extreme read:write ratio (IsHashExcluded / IsHostExcluded run on every request; writes happen only when an admin updates the lists), so it uses sync.RWMutex per the read-heavy store convention.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Store ¶
type Store struct {
// contains filtered or unexported fields
}
Store holds admin-managed exclusions: known-good content hashes and hostnames that bypass all body scanning.
func (*Store) IsHashExcluded ¶
IsHashExcluded reports whether the SHA-256 hex is on the hash allowlist. Hot path: called on every ScanBody invocation. RLock-only.
func (*Store) IsHostExcluded ¶
IsHostExcluded reports whether the hostname is on the host allowlist. Hot path: called once per proxied HTTP request before buffering. RLock-only.
func (*Store) Lists ¶
Lists returns copies of the current hash and host lists, sorted for stable admin output.
Source Files