networkpolicy

Documentation

Index

• Variables
• type NetworkPolicy
  • func New(options Options) (*NetworkPolicy, error)
  • func (r NetworkPolicy) Validate(host string) bool
  • func (r NetworkPolicy) ValidateAddress(IP string) bool
  • func (r NetworkPolicy) ValidateAddressWithPort(IP string, port int) bool
  • func (r NetworkPolicy) ValidateHost(host string) (string, bool)
  • func (r NetworkPolicy) ValidatePort(port int) bool
  • func (r NetworkPolicy) ValidateURLWithIP(host string, ip string) bool
• type Options

Variables

var DefaultHostDenylist = []string{
	"localhost",
}

var DefaultIPv4Denylist = []string{
	"255.255.255.255",
}

var DefaultIPv4DenylistRanges = []string{
	"0.0.0.0/8",
	"10.0.0.0/8",
	"100.64.0.0/10",
	"127.0.0.0/8",
	"169.254.0.0/16",
	"172.16.0.0/12",
	"192.0.0.0/24",
	"192.0.2.0/24",
	"192.88.99.0/24",
	"192.168.0.0/16",
	"198.18.0.0/15",
	"198.51.100.0/24",
	"203.0.113.0/24",
	"224.0.0.0/4",
	"240.0.0.0/4",
}

var DefaultIPv6Denylist = []string{}

var DefaultIPv6DenylistRanges = []string{
	"::1/128",
	"64:ff9b::/96",
	"100::/64",
	"2001::/32",
	"2001:10::/28",
	"2001:20::/28",
	"2001:db8::/32",
	"2002::/16",
	"fc00::/7",
	"fe80::/10",
	"ff00::/8",
}

var DefaultPortAllowList = []int{
	80,
	443,
}

var DefaultSchemeAllowList = []string{
	"http",
	"https",
}

Types

type NetworkPolicy

type NetworkPolicy struct {
	Options *Options

	DenyRanger      cidranger.Ranger
	AllowRanger     cidranger.Ranger
	AllowRules      map[string]*regexp.Regexp
	DenyRules       map[string]*regexp.Regexp
	AllowSchemeList map[string]struct{}
	DenySchemeList  map[string]struct{}
	AllowPortList   map[int]struct{}
	DenyPortList    map[int]struct{}
	// contains filtered or unexported fields
}

func New

func New(options Options) (*NetworkPolicy, error)

New creates a new URL validator using the validator options

func (NetworkPolicy) Validate

func (r NetworkPolicy) Validate(host string) bool

func (NetworkPolicy) ValidateAddress

func (r NetworkPolicy) ValidateAddress(IP string) bool

func (NetworkPolicy) ValidateAddressWithPort

func (r NetworkPolicy) ValidateAddressWithPort(IP string, port int) bool

func (NetworkPolicy) ValidateHost

func (r NetworkPolicy) ValidateHost(host string) (string, bool)

ValidateHost checks all the ips associated to a hostname and returns the valid ip if any

func (NetworkPolicy) ValidatePort

func (r NetworkPolicy) ValidatePort(port int) bool

func (NetworkPolicy) ValidateURLWithIP

func (r NetworkPolicy) ValidateURLWithIP(host string, ip string) bool

type Options

type Options struct {
	DenyList        []string
	AllowList       []string
	AllowSchemeList []string
	DenySchemeList  []string
	AllowPortList   []int
	DenyPortList    []int
}

var DefaultOptions Options

DefaultOptions is the base configuration for the validator