Struct Permissions 

pub struct Permissions {
    pub network: bool,
    pub resource: bool,
    pub file: bool,
    pub privileged: bool,
}

The capabilities a document is allowed to exercise.

Scheme capabilities (network/resource/file) govern what can be loaded; they never grant the right to read a cross-origin response. That latter authority is separate: only privileged (a browser-created chrome context) bypasses CORS. Keeping the two independent means a capability can never be mistaken for a CORS grant, nor vice versa.

Fields

network: bool

May load network-backed schemes (http, https) and data: URLs.

resource: bool

May load resource:// content. The resource loader confines such loads to the bundle directory.

file: bool

May load arbitrary local files via file://. Reserved for chrome.

privileged: bool

Marks a browser-created chrome context (shell, DevTools). This is the only authority that bypasses ordinary CORS read checks; it is tracked separately from the scheme capabilities so the two mechanisms stay independent.

Implementations

impl Permissions

pub const fn none() -> Self

No capabilities at all.

pub fn content_for(url: &Url) -> Self

Base capabilities for a document loaded from url.

Every document may use the network; resource:// documents additionally reach bundled resources (confined to the bundle root). Local files are never reachable from content, and ordinary documents are never privileged.

pub fn content_for_str(url: &str) -> Self

Base capabilities for a document loaded from the string form of a URL.

Unparsable URLs are treated as network-capable opaque content, matching a document that cannot be resolved to a bundled or local origin.

pub const fn chrome() -> Self

Full capabilities for browser-created origins (shell, DevTools).

pub const fn inherit(self, parent: Self) -> Self

Derives the permissions a child frame may hold, given its parent’s effective permissions. The result is the intersection of the two, so a child can never exceed any ancestor.

pub fn for_child_frame(self, child_url: &str) -> Self

Effective capabilities for a child frame loaded from child_url under this (parent) set: the base capabilities of the child’s own origin, intersected with the parent’s. A child can never gain a capability, and privilege is never inherited.

pub const fn is_chrome(self) -> bool

Whether this set is a browser-created chrome context: the only authority that bypasses ordinary CORS read checks.

pub fn allows(self, url: &Url) -> bool

Whether a resource addressed by url may be loaded under these permissions.

pub fn allows_str(self, url: &str) -> bool

Whether a resource addressed by the string form of a URL may be loaded.

Unparsable URLs are treated as opaque content and only allowed when the network capability is held.

Trait Implementations

impl Clone for Permissions

fn clone(&self) -> Permissions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Permissions

impl Debug for Permissions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Permissions

fn default() -> Permissions

Returns the “default value” for a type.

impl Eq for Permissions

impl Hash for Permissions

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for Permissions

fn eq(&self, other: &Permissions) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Permissions