Method checkDomainAllowed

pkg/tools/builtin/fetch/fetch.go:345–362

checkDomainAllowed returns nil if u's host is permitted by the configured allow- and block-lists, or a descriptive error otherwise. When neither list is configured, every URL is allowed.

(u *url.URL)

// allow- and block-lists, or a descriptive error otherwise. When neither list
// is configured, every URL is allowed.
func (h *fetchHandler) checkDomainAllowed(u *url.URL) error {
	host := u.Hostname()
	if host == "" {
		return errors.New("URL has no host")
	}
	matchesAny := func(patterns []string) bool {
		return slices.ContainsFunc(patterns, func(p string) bool {
			return matchesDomain(host, p)
		})
	}
	switch {
	case len(h.blockedDomains) > 0 && matchesAny(h.blockedDomains):
		return fmt.Errorf("URL host %q is blocked by blocked_domains", host)
	case len(h.allowedDomains) > 0 && !matchesAny(h.allowedDomains):
		return fmt.Errorf("URL host %q is not in allowed_domains", host)
	}
	return nil
}

// matchesDomain reports whether host matches pattern (case-insensitive).
//