Checkpoint

testdata/policy/intercept.rego

@@ -0,0 +1,21 @@
+package styx.intercept
+
+reject := 403 if {
+    _target_blocked
+}
+
+template := "template/intercepted.html" if {
+    _target_blocked
+} 
+
+errors contains "Intercepted" if {
+    _target_blocked
+}
+
+_target_blocked if {
+    styx.in_domains("bad", input.request.host)
+}
+
+_target_blocked if {
+    styx.in_networks("bogons", input.client.ip)
+}