Optional ReadonlycodeStable request refusal code; absent when a caller constructs a denial without one.
ReadonlyhopZero for the initial request, or the one-based redirect hop number.
ReadonlyhostDenied hostname, or null when the URL was invalid.
ReadonlyreasonSafe explanation that excludes the path and query string.
One denied request.
hostis null when the URL never parsed;hopis 0 for the initial request, n for the nth redirect. Paths and query strings can contain secrets, so diagnostic fields use the hostname.