1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
// Copyright 2018-2022 the Deno authors. All rights reserved. MIT license.
pub mod io;pub mod ops;pub mod ops_tls;#[cfg(unix)]pub mod ops_unix;pub mod resolve_addr;
use deno_core::error::AnyError;use deno_core::include_js_files;use deno_core::Extension;use deno_core::OpState;use deno_tls::rustls::RootCertStore;use std::cell::RefCell;use std::path::Path;use std::path::PathBuf;use std::rc::Rc;
pub trait NetPermissions {  fn check_net<T: AsRef<str>>(    &mut self,    _host: &(T, Option<u16>),    _api_name: &str,  ) -> Result<(), AnyError>;  fn check_read(&mut self, _p: &Path, _api_name: &str) -> Result<(), AnyError>;  fn check_write(&mut self, _p: &Path, _api_name: &str)    -> Result<(), AnyError>;}
/// `UnstableChecker` is a struct so it can be placed inside `GothamState`;/// using type alias for a bool could work, but there's a high chance/// that there might be another type alias pointing to a bool, which/// would override previously used alias.pub struct UnstableChecker {  pub unstable: bool,}
impl UnstableChecker {  /// Quits the process if the --unstable flag was not provided.  ///  /// This is intentionally a non-recoverable check so that people cannot probe  /// for unstable APIs from stable programs.  // NOTE(bartlomieju): keep in sync with `cli/program_state.rs`  pub fn check_unstable(&self, api_name: &str) {    if !self.unstable {      eprintln!(        "Unstable API '{}'. The --unstable flag must be provided.",        api_name      );      std::process::exit(70);    }  }}/// Helper for checking unstable features. Used for sync ops.pub fn check_unstable(state: &OpState, api_name: &str) {  state.borrow::<UnstableChecker>().check_unstable(api_name)}
/// Helper for checking unstable features. Used for async ops.pub fn check_unstable2(state: &Rc<RefCell<OpState>>, api_name: &str) {  let state = state.borrow();  state.borrow::<UnstableChecker>().check_unstable(api_name)}
pub fn get_declaration() -> PathBuf {  PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("lib.deno_net.d.ts")}
#[derive(Clone)]pub struct DefaultTlsOptions {  pub root_cert_store: Option<RootCertStore>,}
/// `UnsafelyIgnoreCertificateErrors` is a wrapper struct so it can be placed inside `GothamState`;/// using type alias for a `Option<Vec<String>>` could work, but there's a high chance/// that there might be another type alias pointing to a `Option<Vec<String>>`, which/// would override previously used alias.pub struct UnsafelyIgnoreCertificateErrors(pub Option<Vec<String>>);
pub fn init<P: NetPermissions + 'static>(  root_cert_store: Option<RootCertStore>,  unstable: bool,  unsafely_ignore_certificate_errors: Option<Vec<String>>,) -> Extension {  let mut ops = ops::init::<P>();  ops.extend(ops_tls::init::<P>());  Extension::builder()    .js(include_js_files!(      prefix "deno:ext/net",      "01_net.js",      "02_tls.js",    ))    .ops(ops)    .state(move |state| {      state.put(DefaultTlsOptions {        root_cert_store: root_cert_store.clone(),      });      state.put(UnstableChecker { unstable });      state.put(UnsafelyIgnoreCertificateErrors(        unsafely_ignore_certificate_errors.clone(),      ));      Ok(())    })    .build()}