Evaluate url against the policy's synchronous rules: scheme, bare-
IP-literal rejection, metadata hostname, and IP-literal CIDR deny.
DNS revalidation (required when the host is a name) is handled by
enforceSsrfPolicyWithResolution; this pure check covers every
non-DNS case without touching the network.
Evaluate
urlagainst the policy's synchronous rules: scheme, bare- IP-literal rejection, metadata hostname, and IP-literal CIDR deny. DNS revalidation (required when the host is a name) is handled by enforceSsrfPolicyWithResolution; this pure check covers every non-DNS case without touching the network.