Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func GuardURL ¶
GuardURL rejects outbound HTTP(S) targets that point at local, private, link-local, multicast, unspecified, or cloud metadata addresses.
func NewClient ¶
NewClient returns an HTTP client for operator-configured outbound webhooks. It validates both the requested URL and the actual dial target so DNS rebinding and redirects cannot turn an allowed hostname into an internal-address request.
func NewTransport ¶
func NewTransport() http.RoundTripper
NewTransport returns a guarded transport with proxy support disabled. Letting arbitrary environment proxies handle webhook traffic would let a proxy reach networks the local guard intentionally blocks.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.