providerhttp

package

v1.4.33 Latest Latest Go to latest Published: Oct 30, 2026 License: MIT Imports: 8 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/VersusControl/versus-incident

Links

Open Source Insights

Documentation ¶

Overview ¶

Package providerhttp provides hardened outbound HTTP policy for configured providers.

Index ¶

func AddressAllowed(address net.IP, policy Policy) bool
func HostAllowed(host string, policy Policy) bool
func NewTransport(policy Policy) *http.Transport
func NormalizeOrigin(address string) (string, error)
func RefuseRedirects(*http.Request, []*http.Request) error
type Policy

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func AddressAllowed ¶

func AddressAllowed(address net.IP, policy Policy) bool

AddressAllowed applies the provider destination policy to one resolved address.

func HostAllowed ¶

func HostAllowed(host string, policy Policy) bool

HostAllowed rejects known metadata names and disallowed literal addresses.

func NewTransport ¶

func NewTransport(policy Policy) *http.Transport

NewTransport returns a transport that ignores ambient proxies and validates every DNS answer before dialing the validated IP directly.

func NormalizeOrigin ¶

func NormalizeOrigin(address string) (string, error)

NormalizeOrigin validates and canonicalizes an exact HTTP(S) origin.

func RefuseRedirects ¶

func RefuseRedirects(*http.Request, []*http.Request) error

RefuseRedirects prevents credential forwarding and cross-origin redirects.

Types ¶

type Policy ¶

type Policy struct {
	AllowLoopback      bool
	AllowPrivate       bool
	RequireLoopback    bool
	InsecureSkipVerify bool
	RootCAs            *x509.CertPool
}

Policy controls explicitly approved local-network destinations and TLS behavior.

Source Files ¶

View all Source files

policy.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL