Function WithAllowPrivateIPs

pkg/tools/builtin/api/api.go:126–128

WithAllowPrivateIPs disables SSRF dial-time protection so the api tool may dial loopback / RFC1918 / link-local addresses. Operators opt in via `allow_private_ips: true` when the configured endpoint legitimately targets internal services. Tests use this to talk to httptest.NewServer.

(allow bool)

// `allow_private_ips: true` when the configured endpoint legitimately
// targets internal services. Tests use this to talk to httptest.NewServer.
func WithAllowPrivateIPs(allow bool) Option {
	return func(t *ToolSet) { t.allowPrivateIPs = allow }
}

func New(apiConfig latest.APIToolConfig, expander *js.Expander, opts ...Option) *ToolSet {
	t := &ToolSet{