Function isRequestAllowed

pkg/cli/firewall_log.go:244–269

isRequestAllowed determines if a request was allowed based on decision and status This mirrors the logic from the JavaScript parser

(decision, status string)

// isRequestAllowed determines if a request was allowed based on decision and status
// This mirrors the logic from the JavaScript parser
func isRequestAllowed(decision, status string) bool {
	// Check status code first
	if statusCode, err := strconv.Atoi(status); err == nil {
		if statusCode == http.StatusOK || statusCode == http.StatusPartialContent || statusCode == http.StatusNotModified {
			return true
		}
		if statusCode == http.StatusForbidden || statusCode == http.StatusProxyAuthRequired {
			return false
		}
	}

	// Check decision field
	if strings.Contains(decision, "TCP_TUNNEL") ||
		strings.Contains(decision, "TCP_HIT") ||
		strings.Contains(decision, "TCP_MISS") {
		return true
	}

	if strings.Contains(decision, "NONE_NONE") ||
		strings.Contains(decision, "TCP_DENIED") {
		return false
	}

	// Default to denied for safety
	return false
}

// parseFirewallLog parses a firewall log file and returns analysis
func parseFirewallLog(logPath string, verbose bool) (*FirewallAnalysis, error) {