Enum SourceExpression 

pub enum SourceExpression {
    SelfOrigin,
    None,
    UnsafeInline,
    UnsafeEval,
    StrictDynamic,
    UnsafeHashes,
    WasmUnsafeEval,
    ReportSample,
    InlineSpeculationRules,
    Wildcard,
    Scheme(Protocol),
    Host(HostSource),
    Nonce(Cow<'static, str>),
    Hash {
        algorithm: HashAlgorithm,
        value: Cow<'static, str>,
    },
}

Available on crate feature http only.

One CSP source expression — the building block of a source-list.

Every variant has a canonical wire form defined by CSP Level 3 § 2.3; see fmt::Display for the mapping.

Variants

SelfOrigin

Same-origin sources only.

None

No sources are permitted. Per spec must appear alone in a list.

UnsafeInline

Permit inline <script> / <style> blocks and inline event handlers — generally a bad idea on a hardened policy.

UnsafeEval

Permit eval and related JS APIs.

StrictDynamic

Trust scripts loaded by a nonced / hashed script, ignoring the rest of the source list.

UnsafeHashes

Permit specific inline event handlers / style attributes via a matching hash source.

WasmUnsafeEval

Permit WebAssembly.instantiate from buffers (not just from fetched script sources).

ReportSample

Include a sample of the violation in CSP reports.

InlineSpeculationRules

Permit inline <script type="speculationrules"> blocks.

Wildcard

Match any source (*). Equivalent to “no restriction” — only useful for testing.

Scheme(Protocol)

A whole scheme (e.g. data:, blob:, mediastream:). The trailing : is emitted by the serialiser.

Host(HostSource)

A host source — scheme/host/port/path combination, see HostSource.

Nonce(Cow<'static, str>)

'nonce-<base64>' — pairs with nonce="…" on the inline element.

Hash

'<algo>-<base64>' matching an inline script or style.

Fields

algorithm: HashAlgorithm

value: Cow<'static, str>

Base64-encoded digest, without the <algo>- prefix.

Implementations

impl SourceExpression

pub fn scheme(scheme: impl Into<Protocol>) -> SourceExpression

Build a SourceExpression::Scheme from a Protocol (or anything convertible into one).

pub fn host(host: impl Into<HostSource>) -> SourceExpression

Build a SourceExpression::Host from anything convertible into a HostSource (e.g. a Domain or a host-source string via HostSource::try_parse).

pub fn nonce(nonce: impl Into<Cow<'static, str>>) -> SourceExpression

Build a SourceExpression::Nonce.

pub fn hash( algorithm: HashAlgorithm, value: impl Into<Cow<'static, str>>, ) -> SourceExpression

Build a SourceExpression::Hash.

Trait Implementations

impl Clone for SourceExpression

fn clone(&self) -> SourceExpression

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SourceExpression

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Display for SourceExpression

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl From<Domain> for SourceExpression

fn from(d: Domain) -> SourceExpression

Converts to this type from the input type.

impl From<HostSource> for SourceExpression

fn from(h: HostSource) -> SourceExpression

Converts to this type from the input type.

impl From<Protocol> for SourceExpression

fn from(p: Protocol) -> SourceExpression

Converts to this type from the input type.

impl From<SourceExpression> for SourceList

fn from(expr: SourceExpression) -> SourceList

Converts to this type from the input type.

impl FromStr for SourceExpression

type Err = Error

The associated error which can be returned from parsing.

fn from_str( s: &str, ) -> Result<SourceExpression, <SourceExpression as FromStr>::Err>

Parses a string s to return a value of this type.

impl Hash for SourceExpression

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for SourceExpression

fn eq(&self, other: &SourceExpression) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for SourceExpression

impl StructuralPartialEq for SourceExpression