veeshi opened PR #6808 from nethunterslabs:wasi-http-acl
to bytecodealliance:main
:
Similar to #6401 I added support to use our http-acl crate which allows settings ACL rules to allow/deny HTTP requests based on the:
- method
- host
- port
- scheme
- resolved IP addresses if they are in an allowed or denied range
- blocking private IP addresses
- setting the default action if no ACL match is found
This also fixes the broken IPv6 authority support in the wasi-http crate which currently just splits the authority on
:
and then takes the second split value as the port.
veeshi requested fitzgen for a review on PR #6808.
veeshi requested wasmtime-core-reviewers for a review on PR #6808.
veeshi requested wasmtime-default-reviewers for a review on PR #6808.
veeshi updated PR #6808.
veeshi updated PR #6808.
veeshi updated PR #6808.
veeshi updated PR #6808.
veeshi updated PR #6808.
veeshi updated PR #6808.
pchickey requested pchickey for a review on PR #6808.
veeshi requested cfallin for a review on PR #6808.
veeshi updated PR #6808.
veeshi requested wasmtime-compiler-reviewers for a review on PR #6808.
veeshi closed without merge PR #6808.
Last updated: Nov 22 2024 at 16:03 UTC