google / cel-go

Fast, portable, non-Turing complete expression evaluation with gradual typing (Go)
https://cel.dev
Apache License 2.0
2.3k stars 224 forks source link

Variable and nested rule limits #989

Closed TristonianJones closed 3 months ago

TristonianJones commented 3 months ago

Provide a configurable limit for variable and nested rules

Ensure that policies are no so expressive that they cause problems for stacks with limited recursion depths. The limit defaults to 100. This change also makes a critical fix to support conditionally nested rules. Previously the condition was being omitted during composition.

Closes #972