From 7e29f3cb57ac936951e401f97340d93c46af20e0 Mon Sep 17 00:00:00 2001 From: Razvan Dimescu Date: Fri, 20 Mar 2026 12:58:25 +0200 Subject: [PATCH] add domain check endpoint and dashboard search box MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit GET /blocking/check/{domain} — returns whether a domain is blocked, the reason (exact match, parent domain, allowlist, disabled), and the matching rule. Dashboard sidebar has a "Check Domain" search box with inline results and one-click allow button. Co-Authored-By: Claude Opus 4.6 --- site/dashboard.html | 45 ++++++++++++++++++++++++++++++ src/api.rs | 9 ++++++ src/blocklist.rs | 68 +++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 122 insertions(+) diff --git a/site/dashboard.html b/site/dashboard.html index e49a840..d2b25cd 100644 --- a/site/dashboard.html +++ b/site/dashboard.html @@ -519,6 +519,22 @@ body {
+ +
+
+ Check Domain +
+
+
+
+ + +
+
+ +
+
+
@@ -834,6 +850,35 @@ async function allowDomain(domain) { } catch (err) {} } +async function checkDomain(event) { + event.preventDefault(); + const domain = document.getElementById('checkDomain').value.trim(); + const el = document.getElementById('checkResult'); + if (!domain) return false; + try { + const result = await fetchJSON('/blocking/check/' + encodeURIComponent(domain)); + el.style.display = 'block'; + if (result.blocked) { + el.style.background = 'rgba(181, 68, 58, 0.1)'; + el.style.color = 'var(--rose)'; + el.innerHTML = `Blocked — ${result.reason}` + + (result.matched_rule ? `
Rule: ${result.matched_rule}` : '') + + ` `; + } else { + el.style.background = 'rgba(82, 122, 82, 0.1)'; + el.style.color = 'var(--emerald)'; + el.innerHTML = `Allowed — ${result.reason}` + + (result.matched_rule ? `
Rule: ${result.matched_rule}` : ''); + } + } catch (err) { + el.style.display = 'block'; + el.style.background = 'rgba(181, 68, 58, 0.1)'; + el.style.color = 'var(--rose)'; + el.textContent = 'Error: ' + err.message; + } + return false; +} + // Initial load + polling refresh(); setInterval(refresh, 2000); diff --git a/src/api.rs b/src/api.rs index 148e725..be919bd 100644 --- a/src/api.rs +++ b/src/api.rs @@ -37,6 +37,7 @@ pub fn router(ctx: Arc) -> Router { .route("/blocking/pause", post(blocking_pause)) .route("/blocking/allowlist", get(blocking_allowlist)) .route("/blocking/allowlist", post(blocking_allowlist_add)) + .route("/blocking/check/{domain}", get(blocking_check)) .route( "/blocking/allowlist/{domain}", delete(blocking_allowlist_remove), @@ -532,6 +533,14 @@ async fn blocking_pause( Json(serde_json::json!({ "paused_minutes": req.minutes })) } +async fn blocking_check( + State(ctx): State>, + Path(domain): Path, +) -> Json { + let result = ctx.blocklist.lock().unwrap().check(&domain); + Json(result) +} + async fn blocking_allowlist(State(ctx): State>) -> Json> { let list = ctx.blocklist.lock().unwrap().allowlist(); Json(list) diff --git a/src/blocklist.rs b/src/blocklist.rs index 89ebaee..268270d 100644 --- a/src/blocklist.rs +++ b/src/blocklist.rs @@ -12,6 +12,44 @@ pub struct BlocklistStore { last_refresh: Option, } +#[derive(serde::Serialize)] +pub struct BlockCheckResult { + pub blocked: bool, + pub reason: String, + pub matched_rule: Option, +} + +impl BlockCheckResult { + fn blocked(rule: &str, reason: &str) -> Self { + Self { + blocked: true, + reason: reason.to_string(), + matched_rule: Some(rule.to_string()), + } + } + fn allowed(rule: &str, reason: &str) -> Self { + Self { + blocked: false, + reason: reason.to_string(), + matched_rule: Some(rule.to_string()), + } + } + fn not_blocked() -> Self { + Self { + blocked: false, + reason: "not in blocklist".to_string(), + matched_rule: None, + } + } + fn disabled() -> Self { + Self { + blocked: false, + reason: "blocking is disabled".to_string(), + matched_rule: None, + } + } +} + pub struct BlocklistStats { pub enabled: bool, pub paused: bool, @@ -73,6 +111,36 @@ impl BlocklistStore { false } + /// Check if a domain is blocked and return the reason. + pub fn check(&self, domain: &str) -> BlockCheckResult { + let domain = domain.to_lowercase(); + + if !self.enabled { + return BlockCheckResult::disabled(); + } + + if self.allowlist.contains(&domain) { + return BlockCheckResult::allowed(&domain, "exact match in allowlist"); + } + + if self.domains.contains(&domain) { + return BlockCheckResult::blocked(&domain, "exact match in blocklist"); + } + + let mut d = domain.as_str(); + while let Some(dot) = d.find('.') { + d = &d[dot + 1..]; + if self.allowlist.contains(d) { + return BlockCheckResult::allowed(d, "parent domain in allowlist"); + } + if self.domains.contains(d) { + return BlockCheckResult::blocked(d, "parent domain in blocklist"); + } + } + + BlockCheckResult::not_blocked() + } + /// Atomically swap in a new domain set. Build the set outside the lock, /// then call this to swap — keeps lock hold time sub-microsecond. pub fn swap_domains(&mut self, domains: HashSet, sources: Vec) {