Skip to content

AddressPolicy

Defined in: web/address-policy.ts:45

optional allowedUrls?: readonly UrlPattern[]

Defined in: web/address-policy.ts:52

URL patterns (glob strings and/or RegExps — see url-pattern.ts) allowed to bypass both address checks. Empty by default. Matched per redirect hop against urlMatchCandidate — see README.md for the pattern language and the path-scoping this enables that plain hostname:port allowlisting couldn’t.


optional allowPrivateNetwork?: boolean

Defined in: web/address-policy.ts:58

Disables both address checks entirely. Default false. Checked at the same decision point as allowedUrls (not a second enforcement path) — see README.md’s “allowPrivateNetwork” section. Host/workflow-only, like allowedUrls; never exposed on fetchUrl’s input schema.


optional resolver?: HostnameResolver

Defined in: web/address-policy.ts:60

Hostname resolver, defaulting to node:dnslookup(..., { all: true }).