Files
zed/crates
Richard Feldman f73b9daf3b http_proxy: Add hostname allowlist policy types (#59217)
First of a stack adding hostname-allowlisted network access to agent
terminal sandboxing. Adds a new `http_proxy` crate containing only the
allowlist policy types.

`HostPattern` parses exact hostnames or leading-`*.` subdomain
wildcards, normalizes IDNs to punycode, and rejects IP literals and
localhost-family names. `Allowlist` holds a set of patterns (or an
allow-any escape hatch), and `covers` implements host-pattern
subsumption (`*.github.com` covers `api.github.com`) used later to
decide when an already-granted permission covers a new request — the
network analogue of write-path subtree containment.

Pure, self-contained logic with no callers yet. The upstream-proxy
config and the proxy server that enforces these policies land in the
next two PRs.

Release Notes:

- N/A
2026-06-15 18:48:59 +00:00
..
2026-05-04 06:30:47 +00:00
2026-04-29 10:27:47 +00:00
2026-05-04 06:30:47 +00:00
2026-04-29 10:27:47 +00:00
…
2026-06-06 20:28:26 +00:00
2026-05-27 10:31:53 +00:00
2026-04-29 10:27:47 +00:00
2026-05-27 10:31:53 +00:00
2026-06-09 22:46:22 +00:00
2026-05-27 10:31:53 +00:00