headscale/hscontrol/policy/matcher/export_test.go

package matcher

// MatchFromStrings builds a [Match] from raw source and destination
// strings. Unparseable entries are silently dropped (fail-open): the
// resulting [Match] is narrower than the input described, but never
// wider. Callers that need strict validation should pre-validate
// their inputs via [util.ParseIPSet].
func MatchFromStrings(sources, destinations []string) Match {
	return Match{
		srcs:  buildIPSet(sources),
		dests: buildIPSet(destinations),
	}
}