@adcp/sdk API Reference - v14.0.0-beta.6
    Preparing search index...

    Interface SsrfPolicy

    SSRF policy the runner enforces when fetching a preview_url. The default export DEFAULT_SSRF_POLICY mirrors the contract's explicit deny lists.

    interface SsrfPolicy {
        schemes_allowed: readonly string[];
        schemes_denied: readonly string[];
        hosts_denied_ipv4_cidrs: readonly string[];
        hosts_denied_ipv6_cidrs: readonly string[];
        hosts_denied_metadata: readonly string[];
        host_literal_policy: "reject" | "allow";
        shared_private_address_policy?: "allow" | "deny" | "allow_loopback";
    }
    Index

    Properties

    schemes_allowed schemes_denied hosts_denied_ipv4_cidrs hosts_denied_ipv6_cidrs hosts_denied_metadata host_literal_policy shared_private_address_policy?

    Properties

    schemes_allowed: readonly string[]
    schemes_denied: readonly string[]
    hosts_denied_ipv4_cidrs: readonly string[]
    hosts_denied_ipv6_cidrs: readonly string[]
    hosts_denied_metadata: readonly string[]
    host_literal_policy: "reject" | "allow"
    • reject: bare IP literal (v4 or v6) in the URL is rejected regardless of range. Forces resolution through a public DNS name (AdCP Verified behavior).
    • allow: IP literal is permitted subject to the CIDR deny lists and the SDK shared-address setting below. Local-dev default.
    shared_private_address_policy?: "allow" | "deny" | "allow_loopback"

    SDK extension controlling the shared private/non-routable classifier in addition to the explicit contract CIDRs. Built-in policies set this so spread-based policy overrides retain their security posture.

    When omitted, custom policies own their private CIDR rules. The shared always-blocked tier is enforced regardless of this setting.

    Settings

    Member Visibility

    On This Page

    Properties