Johan Fylling 62834a22a6 Asserting every domain is an collection type before evaluation (#6763) ...

Fixing an issue where a non-collection `every`-domain didn’t fail evaluation.
Removing a possible attack surface, where an attacker with the ability to craft portions of the input document could replace a value with an expected collection type, that is known to be processed by an `every`-statement, with a non-collection value and thereby would cause the policy to accept a query that should otherwise be rejected.

Fixes: #6762
Signed-off-by: Johan Fylling <johan.dev@fylling.se>

2024-05-28 10:16:58 +02:00

..

builtins

topdown: Format integer numbers without exponent

2023-06-20 11:32:36 -07:00

cache

Clean expired cache entries periodically

2024-01-09 13:13:30 -08:00

copypropagation

topdown/copyprop: skip 'every' body when re-adding removed eqs (#5375)

2022-11-14 15:46:22 +01:00

lineage

feature: add UnifyOp to tracer events (#5203)

2022-10-10 11:57:31 +02:00

print

ast, topdown: Add print built-in function

2021-10-14 09:31:16 -07:00

testdata

topdown/testdata: make validity 10yrs, update certs (#3919)

2021-10-24 10:55:52 +02:00

aggregates.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

arithmetic.go

topdown: Add upper/lower bound for small ints to avoid overflow

2023-10-03 16:53:07 -07:00

array.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

binary.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

bindings_test.go

Change check-lint to use golangci-lint (#3465)

2021-05-19 07:52:02 +02:00

bindings.go

ast+topdown: cache Array groundness, use for plugging (#4151)

2021-12-17 08:05:09 +01:00

bits.go

Add bitwise operators after bits..

2020-03-01 16:31:18 -08:00

builtins_test.go

Change check-lint to use golangci-lint (#3465)

2021-05-19 07:52:02 +02:00

builtins.go

Add unwrap functionality to topdown.Error

2023-06-08 12:36:14 -07:00

cache_bench_test.go

topdown: cache undefined rule evaluations (#5523)

2023-01-06 11:13:10 +01:00

cache_test.go

topdown: cache undefined rule evaluations (#5523)

2023-01-06 11:13:10 +01:00

cache.go

topdown: cache undefined rule evaluations (#5523)

2023-01-06 11:13:10 +01:00

cancel.go

Add support for query cancellation

2017-07-10 08:51:38 -07:00

casts.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

cidr_test.go

storage/inmem: Allow disabling util.Roundtrip on Write (#5015)

2022-08-18 08:38:21 +02:00

cidr.go

builtins: add net.cidr_is_valid for validating CIDR strings (#5306)

2022-10-26 12:44:31 -04:00

comparison.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

crypto_test.go

Adding a new function crypto.x509.parse_and_verify_certificates_with_options. Fixes #5882 (#6643)

2024-03-27 13:50:44 +00:00

crypto.go

Adding a new function crypto.x509.parse_and_verify_certificates_with_options. Fixes #5882 (#6643)

2024-03-27 13:50:44 +00:00

doc.go

Refactor topdown evaluation/unification

2017-11-09 09:07:48 -08:00

encoding.go

topdown: Add json.marshal_with_options() builtin for indented/"pretty-printed" and/or line-prefixed JSON (#6636)

2024-04-05 10:11:01 +02:00

errors_test.go

Add unwrap functionality to topdown.Error

2023-06-08 12:36:14 -07:00

errors.go

Add unwrap functionality to topdown.Error

2023-06-08 12:36:14 -07:00

eval_test.go

Removing EXPERIMENTAL_GENERAL_RULE_REFS feature flag (#6252)

2023-09-27 14:41:39 +02:00

eval.go

Asserting every domain is an collection type before evaluation (#6763)

2024-05-28 10:16:58 +02:00

example_test.go

topdown: Update evaluator to accept custom built-ins

2019-09-12 17:12:41 -04:00

exported_test.go

General refs in rule heads (#5913)

2023-08-31 12:29:49 +02:00

glob.go

topdown/glob: Fix deferred mutex unlock issue. (#5274)

2022-10-20 09:09:31 +02:00

graphql.go

ast+topdown: Add graphql.schema_is_valid builtin. (#5296)

2022-10-27 14:59:18 +02:00

http_fixup_darwin.go

build: bump golang: 1.17 -> 1.18

2022-03-28 07:24:21 +02:00

http_fixup.go

build: bump golang: 1.17 -> 1.18

2022-03-28 07:24:21 +02:00

http_slow_test.go

topdown: Add retry option for http.send

2023-05-05 13:21:16 -07:00

http_test.go

topdown/http: Respect raise_error flag during input validation

2024-01-29 09:33:31 -08:00

http.go

topdown/http: Respect raise_error flag during input validation

2024-01-29 09:33:31 -08:00

input_test.go

Change check-lint to use golangci-lint (#3465)

2021-05-19 07:52:02 +02:00

input.go

re-do with conflicts: last one wins, in wasm and topdown (#3010)

2020-12-18 13:27:52 +01:00

instrumentation.go

topdown: Fix bug in set/array comprehension indexing

2020-05-15 12:30:07 -04:00

json_bench_test.go

builtins: json.patch rework + benchmarks. (#5390)

2023-02-28 18:52:48 -05:00

json_test.go

topdown/json: Fix panic in json.filter on empty JSON paths. (#5200)

2022-09-29 22:55:25 -04:00

json.go

builtins: json.patch rework + benchmarks. (#5390)

2023-02-28 18:52:48 -05:00

jsonschema_test.go

topdown: JSON Schema validation and verification (#5486)

2023-03-02 11:54:48 +01:00

jsonschema.go

topdown: JSON Schema validation and verification (#5486)

2023-03-02 11:54:48 +01:00

net_test.go

topdown+wasm: Verifying host based on allow_net allowlist in built-in functions (#4152)

2021-12-17 19:43:02 +01:00

net.go

build: bump golang: 1.17 -> 1.18

2022-03-28 07:24:21 +02:00

numbers_test.go

topdown: Improve rand.intn implementation (#3646)

2021-07-14 08:06:20 +02:00

numbers.go

topdown: add numbers.range_step built-in function (#6187)

2023-08-30 11:09:54 +02:00

object_bench_test.go

topdown/object: Rework object.union_n to use in-place merge algorithm. (#5127)

2022-09-14 09:43:57 +02:00

object_test.go

Fix a bug with object.union_n where nested objects are mutated

2023-06-06 10:15:57 -07:00

object.go

Fix a bug with object.union_n where nested objects are mutated

2023-06-06 10:15:57 -07:00

parse_bytes.go

Fix inconsistent error messages in units.parse* (#5046)

2022-08-24 11:00:45 +02:00

parse_units.go

Fix inconsistent error messages in units.parse* (#5046)

2022-08-24 11:00:45 +02:00

parse.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

print_test.go

ast, topdown: Add print built-in function

2021-10-14 09:31:16 -07:00

print.go

ast, topdown: Add print built-in function

2021-10-14 09:31:16 -07:00

providers.go

aws: support for Unsigned Payload or provided content sha256 in AWS signing (#6581)

2024-03-08 10:57:51 -08:00

query_test.go

Aborting query-eval if the compiler has errors (#5949)

2023-05-25 19:38:21 +02:00

query.go

Aborting query-eval if the compiler has errors (#5949)

2023-05-25 19:38:21 +02:00

reachable.go

builtins/graph.reachable_path: fix subpath issue (#5231)

2022-10-13 15:44:01 +02:00

regex_template_test.go

Add regex.template_match built-in

2018-09-20 10:05:49 -07:00

regex_template.go

chore: Use t.Setenv in tests (#5321)

2022-10-27 17:44:56 +02:00

regex.go

perf: avoid unnecessary byte/string conversion

2023-05-23 10:00:59 -07:00

resolver.go

compile: Find dependents of entrypoints and compile them

2020-11-06 15:12:38 -05:00

runtime_test.go

Apply credentials masking on opa.runtime().config (#4165)

2022-01-05 07:51:08 +01:00

runtime.go

Apply credentials masking on opa.runtime().config (#4165)

2022-01-05 07:51:08 +01:00

save_test.go

eval: Add partial eval iteration benchmark and instrument

2019-06-11 16:22:57 -07:00

save.go

topdown: Fixing issues with optimizing rules with refs in the head

2023-10-26 10:33:28 -07:00

semver.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

sets_bench_test.go

topdown/sets_bench_test: Add intersection builtin tests. (#5000)

2022-09-10 08:27:45 +02:00

sets_test.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

sets.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

strings_bench_test.go

Add any_prefix_match and any_suffix_match functions for bulk prefix and suffix matching. (#4997)

2022-08-18 21:33:59 +02:00

strings.go

linters: add unconvert (#5318)

2022-10-27 13:35:39 +02:00

subset.go

fix: Fixing the issue of the object.subset method failing to correctly compare array relationships (#5969)

2023-06-05 12:20:01 +02:00

template.go

feat(builtins): add a new builtin function strings.render_template to render templated strings

2023-11-17 08:53:28 -08:00

time_test.go

topdown, rego: Add parameter to set wall clock time

2020-07-21 16:02:05 -04:00

time.go

Import time/tzdata (#6038)

2023-06-22 15:23:05 +01:00

tokens_test.go

build(go): bump golang, build with 1.22, support 1.20+ (#6595)

2024-02-20 12:46:17 +01:00

tokens.go

fix: jwt_decode_verify missing iss while required (#5919)

2023-05-15 11:17:24 +02:00

topdown_bench_test.go

topdown+ast+rego: read lazy objects from the store (#5380)

2022-11-16 19:43:51 +01:00

topdown_partial_bench_test.go

storage/inmem: Allow disabling util.Roundtrip on Write (#5015)

2022-08-18 08:38:21 +02:00

topdown_partial_test.go

topdown: Fixing issues with optimizing rules with refs in the head

2023-10-26 10:33:28 -07:00

topdown_test.go

topdown: Fixing overactive Early Exit suppression

2024-03-21 19:34:33 +01:00

trace_test.go

feature: add UnifyOp to tracer events (#5203)

2022-10-10 11:57:31 +02:00

trace.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

type_name.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

type.go

topdown/builtins: Refactor registration functions and signatures (#5225)

2022-10-11 09:20:49 +02:00

uuid_test.go

partialevaluation: Eliminate type-check failures

2021-01-11 11:21:44 -05:00

uuid.go

Builtin function to parse uuid with google/uuid library

2023-09-08 12:48:40 -07:00

walk.go

Walk: skip path creation in wildcard assignment (#6267)

2023-10-03 13:12:29 +02:00