mdl_net_policy_t Struct Reference

Session-wide security policy for the network backend. More...

#include <mdl_net.h>

Collaboration diagram for mdl_net_policy_t:

Data Fields
bool	allow_private_hosts
	Permit loopback/private/link-local peers.
bool	allow_cross_host_redirect
	Permit a redirect to a different host.
uint64_t	max_response_bytes
	Per-response byte cap (0 = unlimited).
const char *	proxy
	HTTP/HTTPS proxy URL, or NULL for none.
const char *	socks5
	SOCKS5 proxy URL, or NULL for none.
mdl_net_bytes_t	cookies
	Newline-delimited input cookies.
mdl_net_bytes_t	ca_pem
	Complete PEM CA bundle, or an empty view.

Detailed Description

Session-wide security policy for the network backend.

mdl fetches attacker-influenced URLs, so the backend is hardened by default: only public address space is reachable, redirects may not change host, and each response is size-bounded. These knobs are the deliberate escape hatches, all off/safe by default.

Invariant

max_response_bytes == 0 means "unlimited" (matching libcurl).

Credential views contain bytes rather than paths; their storage remains caller-owned and readable for the backend lifetime.

cookies is newline-delimited ASCII Netscape or explicit-domain Set-Cookie input; ca_pem is one complete nonempty PEM bundle.

Since

0.1.0

Definition at line 81 of file mdl_net.h.

Field Documentation

allow_cross_host_redirect

bool mdl_net_policy_t::allow_cross_host_redirect

Permit a redirect to a different host.

Definition at line 83 of file mdl_net.h.

Referenced by mdl_net_curl_init().

allow_private_hosts

bool mdl_net_policy_t::allow_private_hosts

Permit loopback/private/link-local peers.

Definition at line 82 of file mdl_net.h.

Referenced by mdl_net_curl_init().

ca_pem

mdl_net_bytes_t mdl_net_policy_t::ca_pem

Complete PEM CA bundle, or an empty view.

Definition at line 88 of file mdl_net.h.

Referenced by internal_prepare_credentials(), and mdl_net_curl_init().

cookies

mdl_net_bytes_t mdl_net_policy_t::cookies

Newline-delimited input cookies.

Definition at line 87 of file mdl_net.h.

Referenced by internal_prepare_credentials(), and mdl_net_curl_init().

max_response_bytes

uint64_t mdl_net_policy_t::max_response_bytes

Per-response byte cap (0 = unlimited).

Definition at line 84 of file mdl_net.h.

Referenced by mdl_net_curl_init().

proxy

const char* mdl_net_policy_t::proxy

HTTP/HTTPS proxy URL, or NULL for none.

Definition at line 85 of file mdl_net.h.

Referenced by mdl_net_curl_init().

socks5

const char* mdl_net_policy_t::socks5

SOCKS5 proxy URL, or NULL for none.

Definition at line 86 of file mdl_net.h.

Referenced by mdl_net_curl_init().

---

The documentation for this struct was generated from the following file:

• apps/shared_libs/mdl/inc/mdl_net.h