Struct MitmPolicy 

pub struct MitmPolicy(/* private fields */);

Available on crate features http and inspect and std only.

Atomically updatable MITM scope shared by the ingress routing stacks and UI.

CLI rules bound the scope available to browser rules. When both CLI and browser allow lists are non-empty, an observed host must match both; an empty browser list leaves the CLI ceiling unchanged. A match in either deny list always wins. Routing reads are lock-free.

Implementations

impl MitmPolicy

pub fn try_new( cli_allow: &[String], cli_deny: &[String], ) -> Result<MitmPolicy, Box<dyn Error + Send + Sync>>

pub fn snapshot(&self) -> ScopeSnapshot

pub fn update_scope( &self, mode: ScopeMode, allow: &[String], deny: &[String], ) -> Result<(), Box<dyn Error + Send + Sync>>

pub fn should_inspect_host(&self, host: &Host) -> bool

pub fn should_peek_target(&self, extensions: &Extensions) -> bool

Decide before protocol peeking. Every target reaches the peeker unless explicitly denied because TLS SNI can supply another eligible host.

pub fn should_inspect_target(&self, extensions: &Extensions) -> bool

Decide when peeking did not reveal a more useful domain.

pub fn should_inspect_target_and_host( &self, extensions: &Extensions, host: Option<&Host>, ) -> bool

Decide after protocol peeking using every observed identity. A deny on either the connector target or TLS SNI wins. Otherwise either host can satisfy the effective allow scope.

pub fn is_denied(&self, host: &Host) -> bool

Trait Implementations

impl Clone for MitmPolicy

fn clone(&self) -> MitmPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MitmPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.