allowUrl property
Called for the request URL and for every redirect hop. Returning false
fails the fetch with a TypeError. null allows every http:/https:
URL, which is rarely what untrusted scripts should get.
Implementation
final bool Function(Uri url)? allowUrl;