withNetworkPolicy

Replaces the network capability set. The default policy is WasiNetworkPolicy.DENY_ALL.

HTTP and raw-socket endpoints are granted independently and matched by exact host and port.