# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1771780962 0
# Node ID 72018fe1c33448b16045ceb0b08dcad0734777a9
# Parent  f20bb1c536525098ce461098754811c51ef9cdf5
net.http: Allow passing a 'target_filter' function to restrict connection targets

For example, this is useful if you want to filter out private IP ranges when
making connections to user-provided URLs.

diff -r f20bb1c53652 -r 72018fe1c334 net/http.lua
--- a/net/http.lua	Sat Feb 21 17:08:11 2026 +0100
+++ b/net/http.lua	Sun Feb 22 17:22:42 2026 +0000
@@ -339,7 +339,11 @@
 		end
 	end
 
-	local http_service = basic_resolver.new(host, port_number, "tcp", { servername = req.host; use_dane = use_dane });
+	local http_service = basic_resolver.new(host, port_number, "tcp", {
+		servername = req.host;
+		use_dane = use_dane;
+		filter = ex.target_filter;
+	});
 	connect(http_service, listener, { sslctx = sslctx }, req);
 
 	self.events.fire_event("request", { http = self, request = req, url = u });