Method is_nested

src/docker/mod.rs:207–213

Returns true when TSK is running inside a TSK container with proxy env vars pointing to `tsk-proxy`. In this case, proxy and network isolation are handled by the outer container's Docker environment, so we skip them for nested containers. We require proxy env vars to reference `tsk-proxy` to avoid silently granting unrestricted internet access when `TSK_CONTAINER=1` is set without a properly conf

(&self)

    /// granting unrestricted internet access when `TSK_CONTAINER=1` is set
    /// without a properly configured proxy.
    fn is_nested(&self) -> bool {
        // In tests, always use the normal proxy/network path so mocks work correctly
        if cfg!(test) {
            return false;
        }
        std::env::var("TSK_CONTAINER").is_ok() && Self::has_tsk_proxy_env()
    }

    /// Returns true if at least one proxy env var references the `tsk-proxy` host.
    fn has_tsk_proxy_env() -> bool {